{"report_id":"91f2822a-bfde-45a0-ba63-725b65773557","version":6,"status":"done","tags":[],"date":"2026-03-21T01:11:37Z","url":{"schema":"https","addr":"v6nvec5.sbs","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"172.67.181.170","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"v6nvec5.sbs/","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"title":"Telegram","dom":{"size":3182,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"f0d598383de5267784d29bc7fd9bf321","sha1":"1ca69bdb5fde4863a3a744e5a307990772a6949b","sha256":"8977cb61467671c3d30a63a08f907524200f7c85519485c42e4dc7486e733375","sha512":"8806af3d3ffab5f30f5990976784fef0d6c22806bb4fb8d9e58e05a9d0de70b9bd24f9c33ef6d2efa95488f775cd15a6fa63ffdf82dcccd5a2e4e83a1e808e88","ssdeep":"","tlshash":"a561b0a39ab4885e2365821999d6f048ce25c407c6745c80f9dd16df4fe6fa2c6f323e","dom_hash":"domhasha350b7c8ad317888241b6a0213c77c62","first_seen":"2026-03-21T01:11:41.969968Z","last_seen":"2026-03-21T01:11:41.969968Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"v6nvec5.sbs","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"172.67.181.170","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-25T01:11:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-21","alert":"Hunting_JS_WebAssembly","trigger":"v6nvec5.sbs/rlottie-wasm.f013598f1b2ba719f25e.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"v6nvec5.sbs","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-19","domain_rank":0,"first_seen":"2026-03-21T01:11:38.916873Z","last_seen":"2026-03-21T01:11:38.916873Z","alert_count":64,"request_count":30,"received_data":2478355,"sent_data":13464,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"v6nvec5.sbs/redirect.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"520daa7c07b6389f89cef172a314efe3","sha1":"2bb7308a16238fc1f50add586a9e1d40e1fb9b35","sha256":"750ebfff6d37eab57417dc52afaafbcd948692319ed4227d29bc48ee05bb49c6","sha512":"9497b8ebb853e60e1852fb3a61b77fd67a29d357e2bed442af63ab48314d4c078bd669a5b947e19cc8200c482356a11e5cb4326099c5e43ca21dc743df8ff5ce","ssdeep":"","tlshash":"cec09bc7004345462df126026bc33338a07340f5144cd54349945d20713831f973edcf","size":139,"data":"","first_seen":"2026-03-09T18:42:25.59525Z","last_seen":"2026-03-31T10:27:13.693271Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/main.v2.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1abbd5a5c875a6b126fe3703d6abca58","sha1":"7eafe627e078a96a9428e71f011e7c9665203a5c","sha256":"d2cd7c4ca075693b676105cde299dcd93f046a78ce9d841d2b6d079ff7e0faf7","sha512":"997e78121f61b48bbbb75bcd39c1e25e279b922c53461fddd0a71771f6b4f322ad596cc7e1bba8fcab092c4bc14f8e534b0714f1b0de28176c85931927fd218a","ssdeep":"6144:EyMbkD/FRb1KG8U+fpB/Uc8Er7SjIpRFjodyIcAmhTCVGfnjrDPIPXvN/jYY:tFphyoeYIq7P","tlshash":"6315634672f231394207f0795a5fcd1972356a0b2a88ec593a4ca2511f8a57cebf6fcc","size":934404,"data":"","first_seen":"2026-03-18T20:26:29.226543Z","last_seen":"2026-05-03T23:26:10.562623Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/6708.3f91e6e80ce12129988d.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cb3499e04194c102a58ed4edfe17402","sha1":"a8f4fdbde9e3519ba5b6cb861bbecef064a7784a","sha256":"69d0fcea5d2dfea7462f348ce2fdb7556deb739890017b3a9d8c61e74ae50aa9","sha512":"147f233a3a236da4cb8bc7740eecf108e14d4316c01f22850a50e2ba9150395c9bab533c28bed7908d9f50c10f2d8686edd280904c37c230ad50ea43843a00bc","ssdeep":"192:KIC6cWQ5hVT1/pammBj+hpYUTaI+ndqK+/GtsV17t1IYZ1W:KIzcWKVTPSZ+TYU27nYK+3fR1IYZ1W","tlshash":"8312da56a131747e62a694d6e2140b027a36d0587c09a2bdf73c7cfb2c9680a35bcf78","size":9237,"data":"","first_seen":"2025-08-09T12:19:04.058547Z","last_seen":"2026-07-16T16:02:47.632323Z","times_seen":149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"v6nvec5.sbs/6708.3f91e6e80ce12129988d.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/","date":"2026-03-21T01:11:20.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /6708.3f91e6e80ce12129988d.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v6nvec5.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:32:14 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb57e-2415\"\r\nexpires: Mon, 20 Apr 2026 01:11:20 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ng764W%2BiKXfkRN%2FIsm%2FkExlPnu1IbifMgWU8nXHG6WVs9F0M4YlN%2Ft45%2Fa9b2scDlYKSNjP0UzIAzmkaX0fx4EEzBMXeS50WjTjp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df914ffc9040daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9237,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9183)","md5":"2cb3499e04194c102a58ed4edfe17402","sha1":"a8f4fdbde9e3519ba5b6cb861bbecef064a7784a","sha256":"69d0fcea5d2dfea7462f348ce2fdb7556deb739890017b3a9d8c61e74ae50aa9","sha512":"147f233a3a236da4cb8bc7740eecf108e14d4316c01f22850a50e2ba9150395c9bab533c28bed7908d9f50c10f2d8686edd280904c37c230ad50ea43843a00bc","ssdeep":"192:KIC6cWQ5hVT1/pammBj+hpYUTaI+ndqK+/GtsV17t1IYZ1W:KIzcWKVTPSZ+TYU27nYK+3fR1IYZ1W","tlshash":"8312da56a131747e62a694d6e2140b027a36d0587c09a2bdf73c7cfb2c9680a35bcf78","first_seen":"2025-08-09T12:19:04.058547Z","last_seen":"2026-07-16T16:02:47.632323Z","times_seen":149,"resource_available":true,"data":null}},"time_used":666,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":661,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/","date":"2026-03-21T01:11:20.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /9443.9a77810d7ca6ba92249a.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v6nvec5.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:31:37 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb559-2cf8\"\r\nexpires: Mon, 20 Apr 2026 01:11:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QyRKymmUBwM%2Fb4a9OkTOp0XfciCod2LRzHLy2TjgMArrmj8zJELcs71qbLATWmtMfaYB4vn%2BrGQWsbE85%2F%2BM5J6fFyXEpC5YtN1Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df915041b660daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11512,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11458)","md5":"9c29f3f04c16101bfa13d5a5d3e3a997","sha1":"90bda938fea9303f9c4cbefc18302e614dd42af8","sha256":"76a752f6af267f22dc567f726903203fd05150564d26395e0ae019b5946b1a57","sha512":"de0ccea43468c328299e8edc1445a8e58178c943835a83a911503641055ccd8fcc7025d9535dd9bf6faa4d1984430a39aff34b03b4a10b60c923dfe25561c2f5","ssdeep":"192:s5MdJOqU8g35HilXzTI5dW1RdjgUEqd9qoEhyKNRERAOCEmYGeaIgtcHu6EjBEST:oivU8g35HilXzTRd0UxwoEhZzAXCEm4Q","tlshash":"333207c12351653ee38b98d9d87a04036130da5c781985687b2e6edb3c2bdc5f1b1f71","first_seen":"2025-10-04T18:18:13.146653Z","last_seen":"2026-07-16T16:02:47.583167Z","times_seen":137,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/favicon.svg","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v6nvec5.sbs/","date":"2026-03-21T01:11:16.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v6nvec5.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:32:16 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 20 Apr 2026 01:11:16 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9x1xrSkgtlVuRmh46%2B0QonmJ2XK6vzPJxRWI72pk6%2B2pw%2FUReeFuuDOS2fdNFXFSmVOPqNt3CB8zWTFhzXqjVVrEUSFULopNmBr3\"}]}\r\netag: W/\"69acb580-37c\"\r\ncontent-encoding: br\r\ncf-ray: 9df914e7db480daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":892,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9ee2d4b0edd9f8ba2fb7242162c2c47","sha1":"398522893cf2cdefb5176f11bc67eab31c2d7382","sha256":"a462f1c5333e16b48335054493cfd1d0a13a96847b4b9ffe2cf24403e6e86010","sha512":"e404678e96fe6f6d1fe6c1390e4a64d90844a2d8903f84f1a34b23137593da5ba04112d9504b8bf480b392b294830a363344c5767e3bb5b7a3cb6f5df2a3aa45","ssdeep":"","tlshash":"97114493d060e71ad4c9e16bef61fca0116720cee5b745d485d95a34500fcdbfc08668","first_seen":"2023-05-09T00:01:39Z","last_seen":"2026-08-09T06:18:54.952212Z","times_seen":15701,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":634,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/","date":"2026-03-21T01:11:20.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /9443.9a77810d7ca6ba92249a.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v6nvec5.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:31:37 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb559-2cf8\"\r\nexpires: Mon, 20 Apr 2026 01:11:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sNdLDnkW2Cexr9ilSdPztzNRPSgu9nIQbW%2BDxtEUlZkWGYMo8FGwoJytvVH%2FbNI41WdD0jC8wkrE8TXbzwyOIqkxm%2FYc7%2F4Qaag%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df915041b600daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11512,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11458)","md5":"9c29f3f04c16101bfa13d5a5d3e3a997","sha1":"90bda938fea9303f9c4cbefc18302e614dd42af8","sha256":"76a752f6af267f22dc567f726903203fd05150564d26395e0ae019b5946b1a57","sha512":"de0ccea43468c328299e8edc1445a8e58178c943835a83a911503641055ccd8fcc7025d9535dd9bf6faa4d1984430a39aff34b03b4a10b60c923dfe25561c2f5","ssdeep":"192:s5MdJOqU8g35HilXzTI5dW1RdjgUEqd9qoEhyKNRERAOCEmYGeaIgtcHu6EjBEST:oivU8g35HilXzTRd0UxwoEhZzAXCEm4Q","tlshash":"333207c12351653ee38b98d9d87a04036130da5c781985687b2e6edb3c2bdc5f1b1f71","first_seen":"2025-10-04T18:18:13.146653Z","last_seen":"2026-07-16T16:02:47.583167Z","times_seen":137,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/","date":"2026-03-21T01:11:20.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /9443.9a77810d7ca6ba92249a.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v6nvec5.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:31:37 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb559-2cf8\"\r\nexpires: Mon, 20 Apr 2026 01:11:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MWTXOv6edCN27gL1ooW%2FlngmsNiMQffxYrqhMNfj5l2zsB6u%2BDDjLN1h%2B63DfyqOrEmGz8GCD%2FEC3HIem7wDfZc8PMU3QW1TGYWN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df915041b700daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11512,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11458)","md5":"9c29f3f04c16101bfa13d5a5d3e3a997","sha1":"90bda938fea9303f9c4cbefc18302e614dd42af8","sha256":"76a752f6af267f22dc567f726903203fd05150564d26395e0ae019b5946b1a57","sha512":"de0ccea43468c328299e8edc1445a8e58178c943835a83a911503641055ccd8fcc7025d9535dd9bf6faa4d1984430a39aff34b03b4a10b60c923dfe25561c2f5","ssdeep":"192:s5MdJOqU8g35HilXzTI5dW1RdjgUEqd9qoEhyKNRERAOCEmYGeaIgtcHu6EjBEST:oivU8g35HilXzTRd0UxwoEhZzAXCEm4Q","tlshash":"333207c12351653ee38b98d9d87a04036130da5c781985687b2e6edb3c2bdc5f1b1f71","first_seen":"2025-10-04T18:18:13.146653Z","last_seen":"2026-07-16T16:02:47.583167Z","times_seen":137,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/rlottie-wasm.f013598f1b2ba719f25e.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","date":"2026-03-21T01:11:23.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:32:02 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb572-10037\"\r\nexpires: Mon, 20 Apr 2026 01:11:23 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2rQpWZkGpO3BsftWUzUEJUau6HHYz2TEnK8fAo%2Br8k4vZ3cDIoPfeWLF%2BPRBw%2Fj7uM9uft9Vygf7BlsVdWORsFck5gdVxqEhUsGE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df91512f9dc0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65591,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4441938ee433d3657c20d454d352a336","sha1":"dd67121d7fda7c17be196f60c72dfa06bcb5bc6f","sha256":"659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679","sha512":"f90da6f2003442e547813d62f44e22e688f637616dd7f7f33c81e73d05a3a3de39947c0a8f580002cc96a716caecc4bcd988644ad78b01ae2e9a9792c726604e","ssdeep":"768:O6T4cK2yQ6eO1P2WgcdxazvszXIgBB1ARna76Ae/FqsSwYxRrqhlr3NqR:m1Q6eO4+IUzXXsjvi1alrcR","tlshash":"6153e88535d9b0ab42837878946f310bf2ab6d52641c8410db1dd4dabcb4e49e63ffe8","first_seen":"2024-05-16T20:37:02Z","last_seen":"2026-08-08T01:42:37.375565Z","times_seen":15254,"resource_available":true,"data":null}},"time_used":968,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-21","alert":"Hunting_JS_WebAssembly","trigger":"v6nvec5.sbs/rlottie-wasm.f013598f1b2ba719f25e.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/7784.2a486dcaaaf47415a095.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","date":"2026-03-21T01:11:21.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /7784.2a486dcaaaf47415a095.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:31:58 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb56e-5268\"\r\nexpires: Mon, 20 Apr 2026 01:11:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sPcd0QjmvkbW%2FzEs7%2FG3ZVF4%2BwvEDQNyfloGQSIAEf0fwaJgrIgBu7ZW3j0xox4OmqjRGt5Xn0CHqqYPdI3FAPmtXNn6K7Q9ua06\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df9150628560daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21096,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20959)","md5":"7dc8152b66709fb680cef0db2612ed8c","sha1":"e74591cf18b30dc6246228a0ee5cbd4895ab40dc","sha256":"83d4b9cca15b21490235040ecd1c9bf691569ec51e5b9757f0799eec8b9765b5","sha512":"ee30fff33646fa2480e06a2f2e9a9c74ba1df396749124839392e5145194fe4b6da4ad936066c2438a65b2f82dbf6e8b5b7e4faa8d4b5d9dd5f849c24c6e9734","ssdeep":"384:FAfpRdH3KLSWInGDrQ+YW5LhoASLv5S8VwktQ0CSRU6f/k5MC6LEmYwt/9RXC6ia:FAfpRdX+DrQ2LhoASLFtQUU63k5MC6Lh","tlshash":"5a92187a56ad05c252ec48e908cb1c9951b8e0233c871d7e9174fdd630f28e7e2ead79","first_seen":"2025-06-07T09:51:34.136663Z","last_seen":"2026-07-16T16:02:47.586596Z","times_seen":220,"resource_available":true,"data":null}},"time_used":642,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":631,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/5905.04b286b6eff2126d05dc.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","date":"2026-03-21T01:11:21.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /5905.04b286b6eff2126d05dc.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:31:46 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb562-25e25\"\r\nexpires: Mon, 20 Apr 2026 01:11:22 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdsHVW%2B%2FFzR53R4A2Dj6E6xN5CnbjCSTfPe%2F%2BJYnIeod7naT9ZjMYuzQcUwmclSaY04NYk5nGl39OoC%2B5sjzoItSwpCv5slEp4Sw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df9150a39f00daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155173,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"353bd230c8bed14cd25d2d5c930f4f82","sha1":"bd3987c8fba61d3d5ae0dace22d099553d205db0","sha256":"4db4cb681f199d995ea8613c37d9b1f17238bf9c0f41386a183df6783d468cf9","sha512":"7a0f674bdcabf84df189a21d146c108044ff5e7a56571f1b99de4e8f7ef2142e52c6d463a29d0de1d8374f2aa540c5969ddbd547e455d126eb1cffa1bf2ad3be","ssdeep":"1536:ouG3B/McaUFrnb3wHkgJ4K9pKMwHI/CglGQnAnkY0tfXuYEU3:YlrbBgXGsQkyK","tlshash":"0ce3b682f86424161392a1e654b60749b739f41ca8c540acfb7cfed52dbcd8e36ab734","first_seen":"2025-06-07T09:51:34.132674Z","last_seen":"2026-07-16T16:02:47.588262Z","times_seen":220,"resource_available":true,"data":null}},"time_used":1040,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":436,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/9357.bcd54ffd1e0423615e1f.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","date":"2026-03-21T01:11:23.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /9357.bcd54ffd1e0423615e1f.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:31:45 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb561-a7b\"\r\nexpires: Mon, 20 Apr 2026 01:11:23 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R1q3kfH2KXLiOTLcV67QNMOBsfhJdEMaza71EtnENkBoH4VrGk%2BfC4g5CaLjayEFO2w0CbjN8y7H1uLMyr0bmfNnhj71a66K%2BLcs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df91510db600daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2683,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2629)","md5":"746dc7489995aa53513e584f8991b97d","sha1":"d39086a8a5558a6ccc48109a721e2e4235bf0c8e","sha256":"6ada3e8fc5ac04dc859300cc676e1e325f1ad0118ab36d77e5f2f95a44c51957","sha512":"15781549f71c72ec72044be6abcd4a79a204cf27d138ce5eac213cdf8ae15ea6814a8836a9c6da27765e100d16af63af0341d9531d7428f5219858627de0ed9b","ssdeep":"","tlshash":"5b51ba445a7238795cf386abb09b3b120c6513713819e5421619deaf46b728f5f13f49","first_seen":"2025-10-04T18:18:13.128991Z","last_seen":"2026-07-16T16:02:47.580992Z","times_seen":133,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/","date":"2026-03-21T01:11:20.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /9443.9a77810d7ca6ba92249a.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v6nvec5.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:31:37 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb559-2cf8\"\r\nexpires: Mon, 20 Apr 2026 01:11:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TTLK0XyRNVMgWMIl13nDOBRxf2niPDTjf%2B%2Fnaan4XAaF%2BEJdNrcTN359Q8kNn8DbP%2FrftZa%2Fdwj6BLx8srNN%2FiBelNMGbwQUHqN8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df915040b320daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11512,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11458)","md5":"9c29f3f04c16101bfa13d5a5d3e3a997","sha1":"90bda938fea9303f9c4cbefc18302e614dd42af8","sha256":"76a752f6af267f22dc567f726903203fd05150564d26395e0ae019b5946b1a57","sha512":"de0ccea43468c328299e8edc1445a8e58178c943835a83a911503641055ccd8fcc7025d9535dd9bf6faa4d1984430a39aff34b03b4a10b60c923dfe25561c2f5","ssdeep":"192:s5MdJOqU8g35HilXzTI5dW1RdjgUEqd9qoEhyKNRERAOCEmYGeaIgtcHu6EjBEST:oivU8g35HilXzTRd0UxwoEhZzAXCEm4Q","tlshash":"333207c12351653ee38b98d9d87a04036130da5c781985687b2e6edb3c2bdc5f1b1f71","first_seen":"2025-10-04T18:18:13.146653Z","last_seen":"2026-07-16T16:02:47.583167Z","times_seen":137,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/7784.2a486dcaaaf47415a095.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","date":"2026-03-21T01:11:21.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /7784.2a486dcaaaf47415a095.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:31:58 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb56e-5268\"\r\nexpires: Mon, 20 Apr 2026 01:11:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FBSjfBi5hyQMkqCxoewaI5kztnr44%2BScxUMjSofRZEdR0%2BRXD5AGMSa6O5DY8%2F7hTT4Dk8w%2Fr8%2FOw1LGItgxZt9VkXWiYUVE99tM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df9150628520daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21096,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20959)","md5":"7dc8152b66709fb680cef0db2612ed8c","sha1":"e74591cf18b30dc6246228a0ee5cbd4895ab40dc","sha256":"83d4b9cca15b21490235040ecd1c9bf691569ec51e5b9757f0799eec8b9765b5","sha512":"ee30fff33646fa2480e06a2f2e9a9c74ba1df396749124839392e5145194fe4b6da4ad936066c2438a65b2f82dbf6e8b5b7e4faa8d4b5d9dd5f849c24c6e9734","ssdeep":"384:FAfpRdH3KLSWInGDrQ+YW5LhoASLv5S8VwktQ0CSRU6f/k5MC6LEmYwt/9RXC6ia:FAfpRdX+DrQ2LhoASLFtQUU63k5MC6Lh","tlshash":"5a92187a56ad05c252ec48e908cb1c9951b8e0233c871d7e9174fdd630f28e7e2ead79","first_seen":"2025-06-07T09:51:34.136663Z","last_seen":"2026-07-16T16:02:47.586596Z","times_seen":220,"resource_available":true,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/7784.2a486dcaaaf47415a095.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","date":"2026-03-21T01:11:21.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /7784.2a486dcaaaf47415a095.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:31:58 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb56e-5268\"\r\nexpires: Mon, 20 Apr 2026 01:11:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6juboNOk0wM59DfpbdFYcisCyOGMdo5AiWGoBx%2FASpskpRVvruWdC%2BedoFeo%2B5qrnd9Fs%2F9kB1kHnX7UjJK60TXeiwTectHUY62J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df91506285f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21096,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20959)","md5":"7dc8152b66709fb680cef0db2612ed8c","sha1":"e74591cf18b30dc6246228a0ee5cbd4895ab40dc","sha256":"83d4b9cca15b21490235040ecd1c9bf691569ec51e5b9757f0799eec8b9765b5","sha512":"ee30fff33646fa2480e06a2f2e9a9c74ba1df396749124839392e5145194fe4b6da4ad936066c2438a65b2f82dbf6e8b5b7e4faa8d4b5d9dd5f849c24c6e9734","ssdeep":"384:FAfpRdH3KLSWInGDrQ+YW5LhoASLv5S8VwktQ0CSRU6f/k5MC6LEmYwt/9RXC6ia:FAfpRdX+DrQ2LhoASLFtQUU63k5MC6Lh","tlshash":"5a92187a56ad05c252ec48e908cb1c9951b8e0233c871d7e9174fdd630f28e7e2ead79","first_seen":"2025-06-07T09:51:34.136663Z","last_seen":"2026-07-16T16:02:47.586596Z","times_seen":220,"resource_available":true,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/9357.bcd54ffd1e0423615e1f.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","date":"2026-03-21T01:11:23.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /9357.bcd54ffd1e0423615e1f.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:31:45 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb561-a7b\"\r\nexpires: Mon, 20 Apr 2026 01:11:23 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GxlOG0lUTIKmPCXFThnE7MDdIxe39OE%2Bc9eugRIdeqBVEDzscEV16w3jpkBOfW0fMeHVhfAX2dmdFS6jKH85Nbwl0Hh%2FuNJG%2BbJb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df91510db6d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2683,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2629)","md5":"746dc7489995aa53513e584f8991b97d","sha1":"d39086a8a5558a6ccc48109a721e2e4235bf0c8e","sha256":"6ada3e8fc5ac04dc859300cc676e1e325f1ad0118ab36d77e5f2f95a44c51957","sha512":"15781549f71c72ec72044be6abcd4a79a204cf27d138ce5eac213cdf8ae15ea6814a8836a9c6da27765e100d16af63af0341d9531d7428f5219858627de0ed9b","ssdeep":"","tlshash":"5b51ba445a7238795cf386abb09b3b120c6513713819e5421619deaf46b728f5f13f49","first_seen":"2025-10-04T18:18:13.128991Z","last_seen":"2026-07-16T16:02:47.580992Z","times_seen":133,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-21T01:11:13.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:14 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T8UKBoEKOhuYcFj1snttsPUwFXS8Oyl4O%2FF88kjjbGGXpSt5YcAXcOvXcegOCHFNxoMlog8UzP2tOE7yNBHmkhWDfzLtMkzTbafw\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9df914d4de1cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e0969fc77c0ceeb3066cbd5c8b64f5ad","sha1":"7c1846145b7e239593b013ad8406b4fbe8c691d8","sha256":"bf3a5b6bcfffc664cba06f7751d3bb6903c010d8340d31d2f6801e471f53b6db","sha512":"eeb686cf8849414a38db3345fe69ad203db61fe87f46b13d2ad50a14e5d923d0ff1fa60e0bbbe82db720b20e94a2e69b41c9354e7e042f41e74054396c22e064","ssdeep":"","tlshash":"ae51a0a35aa0885e2365821959d7f048ce26c407c6b45c80f5dd56df4fe2fa2c6f323e","first_seen":"2026-03-21T01:11:41.977876Z","last_seen":"2026-03-21T01:11:41.977876Z","times_seen":1,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":97,"dns":82,"connect":1,"send":0,"wait":622,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/compatTest.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/","date":"2026-03-21T01:11:14.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /compatTest.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v6nvec5.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:14 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:32:09 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb579-50782\"\r\nexpires: Mon, 20 Apr 2026 01:11:14 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wWbyx3GMdlTQewdr%2BM%2FKuFC3lbUzAGiWwhrDJ3n0iXieUizEnbjbBOdEa1tuo7I28jcvT%2FQ%2FactOsyPVwUFx4JcEc9AIHjKCcN%2Fj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df914d9eec80daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":329602,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"93afa63cc3ef5dfad53da5bae6a40551","sha1":"9041190b7d026f46bdad4da5d2a9a6cdcc37d785","sha256":"b343964281dce0b0a472e24d26c16b7329c6376750049e888b1d374713ec37a5","sha512":"096a2f0046aeb466facb5496a222cf656dc34ce964c6b65058812cb4f2c0f4f7f3f072b9cfb4443d32398869984674005509d66e1c7dd22ccd90d3dee14d5078","ssdeep":"6144:6sjDV7wan8C1/zwtqcqCRU6++ztENxs2WbrJIvyvQCN:6sjDVcAvsBFU2ztEN1ed","tlshash":"a76421e263e11d7e09778b18be3a79edd47d5ca2154aa08df4137808e07dad863e1339","first_seen":"2026-03-08T18:40:16.905036Z","last_seen":"2026-07-16T16:02:47.638916Z","times_seen":48,"resource_available":true,"data":null}},"time_used":1631,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":629,"receive":1002,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/5905.04b286b6eff2126d05dc.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","date":"2026-03-21T01:11:21.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /5905.04b286b6eff2126d05dc.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:31:46 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb562-25e25\"\r\nexpires: Mon, 20 Apr 2026 01:11:22 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CUdfbb4sDtdKunnQvv9n24NTLsB9XjhXQEATKeL71mISx024bMxz0uYZwzQfYmFtWOdI7IfQQGVvWU9lE8vI4%2BmpedurO1sw7bgI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df9150a39ee0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155173,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"353bd230c8bed14cd25d2d5c930f4f82","sha1":"bd3987c8fba61d3d5ae0dace22d099553d205db0","sha256":"4db4cb681f199d995ea8613c37d9b1f17238bf9c0f41386a183df6783d468cf9","sha512":"7a0f674bdcabf84df189a21d146c108044ff5e7a56571f1b99de4e8f7ef2142e52c6d463a29d0de1d8374f2aa540c5969ddbd547e455d126eb1cffa1bf2ad3be","ssdeep":"1536:ouG3B/McaUFrnb3wHkgJ4K9pKMwHI/CglGQnAnkY0tfXuYEU3:YlrbBgXGsQkyK","tlshash":"0ce3b682f86424161392a1e654b60749b739f41ca8c540acfb7cfed52dbcd8e36ab734","first_seen":"2025-06-07T09:51:34.132674Z","last_seen":"2026-07-16T16:02:47.588262Z","times_seen":220,"resource_available":true,"data":null}},"time_used":1042,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":436,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/5905.04b286b6eff2126d05dc.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","date":"2026-03-21T01:11:21.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /5905.04b286b6eff2126d05dc.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:31:46 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb562-25e25\"\r\nexpires: Mon, 20 Apr 2026 01:11:22 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zhXIzklo9q009KrmFJYriFgZQvUkV4qHcsL4SJgln%2BsBqwhKF28Dlnr%2BczaxO%2FEduqGdzrq4Harj5QWGGBP0PHq%2BnOUgfwDKlr3v\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df9150a39f70daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155173,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"353bd230c8bed14cd25d2d5c930f4f82","sha1":"bd3987c8fba61d3d5ae0dace22d099553d205db0","sha256":"4db4cb681f199d995ea8613c37d9b1f17238bf9c0f41386a183df6783d468cf9","sha512":"7a0f674bdcabf84df189a21d146c108044ff5e7a56571f1b99de4e8f7ef2142e52c6d463a29d0de1d8374f2aa540c5969ddbd547e455d126eb1cffa1bf2ad3be","ssdeep":"1536:ouG3B/McaUFrnb3wHkgJ4K9pKMwHI/CglGQnAnkY0tfXuYEU3:YlrbBgXGsQkyK","tlshash":"0ce3b682f86424161392a1e654b60749b739f41ca8c540acfb7cfed52dbcd8e36ab734","first_seen":"2025-06-07T09:51:34.132674Z","last_seen":"2026-07-16T16:02:47.588262Z","times_seen":220,"resource_available":true,"data":null}},"time_used":1038,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":436,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/rlottie-wasm.f013598f1b2ba719f25e.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","date":"2026-03-21T01:11:23.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:32:02 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb572-10037\"\r\nexpires: Mon, 20 Apr 2026 01:11:23 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tOnrZ%2B0rlcJzzJoiwTTwNfMnvRz3nruWX6CnNOYTsSx0lp7tO8Et8KfPMRyEtaX%2F3r3D6f4stIIe4y3xD7xxBe1%2BTj0sutElI%2Fbf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df91512f9c40daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65591,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4441938ee433d3657c20d454d352a336","sha1":"dd67121d7fda7c17be196f60c72dfa06bcb5bc6f","sha256":"659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679","sha512":"f90da6f2003442e547813d62f44e22e688f637616dd7f7f33c81e73d05a3a3de39947c0a8f580002cc96a716caecc4bcd988644ad78b01ae2e9a9792c726604e","ssdeep":"768:O6T4cK2yQ6eO1P2WgcdxazvszXIgBB1ARna76Ae/FqsSwYxRrqhlr3NqR:m1Q6eO4+IUzXXsjvi1alrcR","tlshash":"6153e88535d9b0ab42837878946f310bf2ab6d52641c8410db1dd4dabcb4e49e63ffe8","first_seen":"2024-05-16T20:37:02Z","last_seen":"2026-08-08T01:42:37.375565Z","times_seen":15254,"resource_available":true,"data":null}},"time_used":971,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":627,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-21","alert":"Hunting_JS_WebAssembly","trigger":"v6nvec5.sbs/rlottie-wasm.f013598f1b2ba719f25e.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/main.v2.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/","date":"2026-03-21T01:11:14.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /main.v2.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v6nvec5.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:14 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 04:05:10 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69ba2476-e420b\"\r\nexpires: Mon, 20 Apr 2026 01:11:14 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hvvgv4iSJuMqmz71iFg%2Fty8sV7zi3OdwpEC%2FEPQPPq1SrX4qSxsJPSc4%2FOlcA0oMWA0ekf0H25JsWUGpbfR82SeSQu7lIUWTQm1j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df914d9eebb0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":934411,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (679)","md5":"1abbd5a5c875a6b126fe3703d6abca58","sha1":"7eafe627e078a96a9428e71f011e7c9665203a5c","sha256":"d2cd7c4ca075693b676105cde299dcd93f046a78ce9d841d2b6d079ff7e0faf7","sha512":"997e78121f61b48bbbb75bcd39c1e25e279b922c53461fddd0a71771f6b4f322ad596cc7e1bba8fcab092c4bc14f8e534b0714f1b0de28176c85931927fd218a","ssdeep":"6144:EyMbkD/FRb1KG8U+fpB/Uc8Er7SjIpRFjodyIcAmhTCVGfnjrDPIPXvN/jYY:tFphyoeYIq7P","tlshash":"6315634672f231394207f0795a5fcd1972356a0b2a88ec593a4ca2511f8a57cebf6fcc","first_seen":"2026-03-18T20:26:29.226543Z","last_seen":"2026-05-03T23:26:10.562623Z","times_seen":26,"resource_available":true,"data":null}},"time_used":1523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":1207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/5905.04b286b6eff2126d05dc.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","date":"2026-03-21T01:11:21.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /5905.04b286b6eff2126d05dc.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:31:46 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb562-25e25\"\r\nexpires: Mon, 20 Apr 2026 01:11:22 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=inFg9DdBpcEBpURQB5zKCAN5MEkcxMythAL85lWsGSSH1xhd3Vbi1XhPv0nIcD%2BdNNpVUZofKGi2kdpbLcn4EwhEyFT%2BmMbYDEUQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df9150a39e90daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155173,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"353bd230c8bed14cd25d2d5c930f4f82","sha1":"bd3987c8fba61d3d5ae0dace22d099553d205db0","sha256":"4db4cb681f199d995ea8613c37d9b1f17238bf9c0f41386a183df6783d468cf9","sha512":"7a0f674bdcabf84df189a21d146c108044ff5e7a56571f1b99de4e8f7ef2142e52c6d463a29d0de1d8374f2aa540c5969ddbd547e455d126eb1cffa1bf2ad3be","ssdeep":"1536:ouG3B/McaUFrnb3wHkgJ4K9pKMwHI/CglGQnAnkY0tfXuYEU3:YlrbBgXGsQkyK","tlshash":"0ce3b682f86424161392a1e654b60749b739f41ca8c540acfb7cfed52dbcd8e36ab734","first_seen":"2025-06-07T09:51:34.132674Z","last_seen":"2026-07-16T16:02:47.588262Z","times_seen":220,"resource_available":true,"data":null}},"time_used":1042,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":436,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.465390c6e54c60f4a15f.woff2","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://v6nvec5.sbs/","date":"2026-03-21T01:11:17.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /KFOmCnqEu92Fr1Mu4mxKKTU1Kg.465390c6e54c60f4a15f.woff2 HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://v6nvec5.sbs/main.c2527ac16c33f0e1edc5.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 11016\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:31:20 GMT\r\npriority: u=4,i=?0\r\netag: \"69acb548-2b08\"\r\nexpires: Mon, 20 Apr 2026 01:11:17 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KulzUfH7c2EKLOOdETVPYTMQRKN3risUASNow483KU1iVukNWp%2FSvlKv0ugnB13zgL6l3%2F6j1OPhdfmnxL1dyGrxFcSB%2FUMJCwAE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df914ed08ca0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11016,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11016, version 1.0","md5":"15fa3062f8929bd3b05fdca5259db412","sha1":"6ff06a34f68ad0324ddec1bbe4d453c959178b36","sha256":"5d1bc9b443f3f81fa4b4ad4634c1bb9702194c1898e3a9de0ab5e2cdc0e9f479","sha512":"07e96d7520b4ede158e77bef10a01a33cd8be7d263fe6900f89c023e65e4a63570e8a442dec2e96030fb563b25610005a748d48f9330fd31eb91b37d1003d376","ssdeep":"192:Tysuo7z1NVoTUYAKVOO7YVxRwHQUXFI5xoBwH9f4d9QFmOfiS:TvdvVoTSjOYR4QUVIgBwpFLaS","tlshash":"6e32af8071ff1c50ff85c2f69be68efa2c2b1895c619016f5240b476397525e9c294bb","first_seen":"2023-04-05T09:25:54Z","last_seen":"2026-08-09T17:48:56.802727Z","times_seen":34530,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/notification.mp3","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://v6nvec5.sbs/","date":"2026-03-21T01:11:17.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /notification.mp3 HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://v6nvec5.sbs/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 21 Mar 2026 01:11:17 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 10880\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:31:26 GMT\r\npriority: u=4,i=?0\r\netag: \"69acb54e-2a80\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-range: bytes 0-10879/10880\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dmdyBMK4F1cXvmhBK3SC%2FNtmkvOBr62PcmrNOlTC2m%2FKW%2FjAW2YSyIk23IfFj2hhl2zwMCHJKsTyyN18wTd0Qee5RbhLxQaBC6bc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df914ed29090daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10880,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"eba09b6a457792c52fc610b5f9f974b3","sha1":"95e6e0f7648e28ea21bc434054ea59aba3a35aea","sha256":"86093551f5a7f68c7dcac947bd8dc54c6a79dd9a5d83f7e40116d640eb28c7d6","sha512":"9dfc5ff830c9ed75c9923528c31e1361fa36500d76a209cd475984e5585a644c8aff1600bf02a658ef363436a51988ff1e63aa7606e541dc4a7b3449c5be4852","ssdeep":"192:RuQQeX7rYX/WUUIk8DLh+2BHpZqlXCYP69tuORf6tVQRa/nwNQBv5JC:RRYeUUEDLk2VClyaV0aZ5g","tlshash":"37226b18af11056ef4866bf0b3939b8dc42d26c37a26d4cdd3a5d7e369430e2a7d500d","first_seen":"2023-05-16T22:57:55Z","last_seen":"2026-08-08T01:42:37.253374Z","times_seen":16893,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":621,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/9357.bcd54ffd1e0423615e1f.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","date":"2026-03-21T01:11:23.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /9357.bcd54ffd1e0423615e1f.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:31:45 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb561-a7b\"\r\nexpires: Mon, 20 Apr 2026 01:11:23 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WLkanhljLU436UTvb135rDOfAVN5kZLfwR5h2puJBx1PZqNMv7dZ%2FWBUl25ORzlP4fBVaXa1ChevGk046RPvBtE1CuAwUU0WqEdQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df91510db650daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2683,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2629)","md5":"746dc7489995aa53513e584f8991b97d","sha1":"d39086a8a5558a6ccc48109a721e2e4235bf0c8e","sha256":"6ada3e8fc5ac04dc859300cc676e1e325f1ad0118ab36d77e5f2f95a44c51957","sha512":"15781549f71c72ec72044be6abcd4a79a204cf27d138ce5eac213cdf8ae15ea6814a8836a9c6da27765e100d16af63af0341d9531d7428f5219858627de0ed9b","ssdeep":"","tlshash":"5b51ba445a7238795cf386abb09b3b120c6513713819e5421619deaf46b728f5f13f49","first_seen":"2025-10-04T18:18:13.128991Z","last_seen":"2026-07-16T16:02:47.580992Z","times_seen":133,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/rlottie-wasm.f013598f1b2ba719f25e.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","date":"2026-03-21T01:11:23.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:32:02 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb572-10037\"\r\nexpires: Mon, 20 Apr 2026 01:11:23 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2dwX7XztY32PLEpbQVQYgY3HXyBtmUmPgxBZVQ9VtF3QG69YuejmxqBMkxIeNtaGAC%2FfJcQrXx0VdhKP2D7qH%2FjQRHPtb4y%2BZJVo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df91512f9bc0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65591,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4441938ee433d3657c20d454d352a336","sha1":"dd67121d7fda7c17be196f60c72dfa06bcb5bc6f","sha256":"659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679","sha512":"f90da6f2003442e547813d62f44e22e688f637616dd7f7f33c81e73d05a3a3de39947c0a8f580002cc96a716caecc4bcd988644ad78b01ae2e9a9792c726604e","ssdeep":"768:O6T4cK2yQ6eO1P2WgcdxazvszXIgBB1ARna76Ae/FqsSwYxRrqhlr3NqR:m1Q6eO4+IUzXXsjvi1alrcR","tlshash":"6153e88535d9b0ab42837878946f310bf2ab6d52641c8410db1dd4dabcb4e49e63ffe8","first_seen":"2024-05-16T20:37:02Z","last_seen":"2026-08-08T01:42:37.375565Z","times_seen":15254,"resource_available":true,"data":null}},"time_used":973,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":345,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-21","alert":"Hunting_JS_WebAssembly","trigger":"v6nvec5.sbs/rlottie-wasm.f013598f1b2ba719f25e.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/redirect.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/","date":"2026-03-21T01:11:14.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /redirect.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v6nvec5.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:14 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 08 Mar 2026 03:59:19 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 20 Apr 2026 01:11:14 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BmXhUUh3qNgNSkeT%2FaiF3c5IwdfBnAolxOOhxIpSzqbaBVrHVsDs2aH77eWr5gM%2F0CtL7gkGy11HTf%2F7zg5WWff2%2BG%2FXSRkXciSH\"}]}\r\netag: W/\"69acf417-8b\"\r\ncontent-encoding: br\r\ncf-ray: 9df914d9eeb70daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"520daa7c07b6389f89cef172a314efe3","sha1":"2bb7308a16238fc1f50add586a9e1d40e1fb9b35","sha256":"750ebfff6d37eab57417dc52afaafbcd948692319ed4227d29bc48ee05bb49c6","sha512":"9497b8ebb853e60e1852fb3a61b77fd67a29d357e2bed442af63ab48314d4c078bd669a5b947e19cc8200c482356a11e5cb4326099c5e43ca21dc743df8ff5ce","ssdeep":"","tlshash":"cec09bc7004345462df126026bc33338a07340f5144cd54349945d20713831f973edcf","first_seen":"2026-03-09T18:42:25.59525Z","last_seen":"2026-03-31T10:27:13.693271Z","times_seen":32,"resource_available":true,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/main.c2527ac16c33f0e1edc5.css","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v6nvec5.sbs/","date":"2026-03-21T01:11:14.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /main.c2527ac16c33f0e1edc5.css HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v6nvec5.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:14 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:46:23 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb8cf-1c066\"\r\nexpires: Mon, 20 Apr 2026 01:11:14 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UQUXBJKxCFQyJdJ114mPJlpTDNzm56nr0JVn0f4OKqgn%2Fgthuv7NCwgPpbO788QhtdnKopHQC6SawQgXKfpQV3eB8XjCn7CX1Q52\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df914d9eec60daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114790,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11610)","md5":"0caeaf459d1ed0b33c615cb5f14dca86","sha1":"40c6cd3e41d49b6b46a56acf4b241b6bec99ab52","sha256":"32851da5b1124845db6cfc9b9fddfbc554cb4568d0b86b22c4ecd46b127c6927","sha512":"d72790a9068072d03a4436f188a42a334b976fc9dff29b04762830ad889915a9e9279341ea55229d9fa8a910fdbf46975a3e488f3bd2a7e025053c1d3a77254d","ssdeep":"768:w10Q9RiIfAm3lPrChnv3XrscbqasUgkndLoo9+b6UbdWAkcI5/ydO8QtfEEV+p2z:IPRiSArscbxsUgknK7WF5oYfNT","tlshash":"fbb3d8a4e98411f9ab23c23e97c4d76c9d38e481dd210fafb617615c07ca3eb12d2b59","first_seen":"2025-10-04T18:18:13.142524Z","last_seen":"2026-07-16T16:02:47.628214Z","times_seen":121,"resource_available":false,"data":null}},"time_used":974,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":359,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/icon-192x192.png","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v6nvec5.sbs/","date":"2026-03-21T01:11:16.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /icon-192x192.png HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v6nvec5.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:17 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 08 Mar 2026 00:02:41 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acbca1-bf3\"\r\nexpires: Mon, 20 Apr 2026 01:11:16 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9pQWskrNcnTpl8fHGja6cjxtu%2FUyQ2VLEZ2OzY1DQ%2B7A3nekTcDy%2BClXF8wjpxxF6h6t4Gh73EJV5%2BaquN6sz7XOrGIRQ2L%2F9YMB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df914e7db460daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"1a1650d2c76bfc1ac484646c19e495b9","sha1":"fe58d66042ce9241226f5da9370230285ff604fc","sha256":"6e587a62c9d7a97f25265ab5eb29d101ad2e36810042a4116d2dd29da96b0bf8","sha512":"79c5c9278959bc94f66434779bebc1b46c055655f0bc58aa375f179c227e7ac0e52dea196764719d42aadcf98e4fd3b5a4488f2db977edde430aa3df733c03bc","ssdeep":"","tlshash":"bd514cd3253318e8e2dbfd7ace62041f656691ce5638ec120568de720c8985dc070caa","first_seen":"2023-05-16T22:57:55Z","last_seen":"2026-08-08T01:42:37.268089Z","times_seen":16534,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":647,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/7784.2a486dcaaaf47415a095.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","date":"2026-03-21T01:11:21.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /7784.2a486dcaaaf47415a095.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:31:58 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb56e-5268\"\r\nexpires: Mon, 20 Apr 2026 01:11:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MJDiYsAMKWexM%2BEbrfwuPmHVEKd5xMp1gU7o99cGooH051iztRO5iUgTFiD72tUo4%2BqcZ%2Bf2S3wandtnI4nRwsB1DiRXpDdwEzvt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df91506286b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21096,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20959)","md5":"7dc8152b66709fb680cef0db2612ed8c","sha1":"e74591cf18b30dc6246228a0ee5cbd4895ab40dc","sha256":"83d4b9cca15b21490235040ecd1c9bf691569ec51e5b9757f0799eec8b9765b5","sha512":"ee30fff33646fa2480e06a2f2e9a9c74ba1df396749124839392e5145194fe4b6da4ad936066c2438a65b2f82dbf6e8b5b7e4faa8d4b5d9dd5f849c24c6e9734","ssdeep":"384:FAfpRdH3KLSWInGDrQ+YW5LhoASLv5S8VwktQ0CSRU6f/k5MC6LEmYwt/9RXC6ia:FAfpRdX+DrQ2LhoASLFtQUU63k5MC6Lh","tlshash":"5a92187a56ad05c252ec48e908cb1c9951b8e0233c871d7e9174fdd630f28e7e2ead79","first_seen":"2025-06-07T09:51:34.136663Z","last_seen":"2026-07-16T16:02:47.586596Z","times_seen":220,"resource_available":true,"data":null}},"time_used":638,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/9357.bcd54ffd1e0423615e1f.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","date":"2026-03-21T01:11:23.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /9357.bcd54ffd1e0423615e1f.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:31:45 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb561-a7b\"\r\nexpires: Mon, 20 Apr 2026 01:11:23 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bsAMP%2B%2B4Ipk7jw3EWWYpOvqpxMllRob9%2B0hvsUTW%2FDaRnYuw9eGRoNuIx1yQV3RMkYdRg0cTKrQdgYtnC27yBhxjg0GubmdKJ0vM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df91510cb530daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2683,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2629)","md5":"746dc7489995aa53513e584f8991b97d","sha1":"d39086a8a5558a6ccc48109a721e2e4235bf0c8e","sha256":"6ada3e8fc5ac04dc859300cc676e1e325f1ad0118ab36d77e5f2f95a44c51957","sha512":"15781549f71c72ec72044be6abcd4a79a204cf27d138ce5eac213cdf8ae15ea6814a8836a9c6da27765e100d16af63af0341d9531d7428f5219858627de0ed9b","ssdeep":"","tlshash":"5b51ba445a7238795cf386abb09b3b120c6513713819e5421619deaf46b728f5f13f49","first_seen":"2025-10-04T18:18:13.128991Z","last_seen":"2026-07-16T16:02:47.580992Z","times_seen":133,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v6nvec5.sbs/rlottie-wasm.f013598f1b2ba719f25e.js","fqdn":"v6nvec5.sbs","domain":"v6nvec5.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js","date":"2026-03-21T01:11:23.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v6nvec5.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 01:04:24 GMT","end":"Thu, 18 Jun 2026 01:04:23 GMT"},"fingerprint":{"sha1":"FE:7C:B1:75:B0:CA:08:C9:E8:E9:DC:BB:3E:20:96:ED:DD:30:32:9B","sha256":"0B:DD:28:DE:22:2A:C5:C0:42:33:87:87:24:94:8F:DC:12:6B:B7:4F:FA:D3:7E:A8:BE:7D:4B:FB:E5:82:2D:9B"}}},"request":{"raw":"GET /rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1\r\nHost: v6nvec5.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v6nvec5.sbs/9443.9a77810d7ca6ba92249a.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 01:11:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Mar 2026 23:32:02 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69acb572-10037\"\r\nexpires: Mon, 20 Apr 2026 01:11:23 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' https://lunqor.top wss://*.telegram.org https://*.telegram.org https://telegram.org; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'none';\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zjSJ9mYSw1Z3x8%2FdaZynpQ56W%2FMA6GM1cGaSxaxQY6AsrtbDlXLLAdtlUboeQG2GWIrNiV5Z6rS9S4v4qw0f0DW%2FoD1OT25wikOI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df91512f9e10daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65591,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4441938ee433d3657c20d454d352a336","sha1":"dd67121d7fda7c17be196f60c72dfa06bcb5bc6f","sha256":"659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679","sha512":"f90da6f2003442e547813d62f44e22e688f637616dd7f7f33c81e73d05a3a3de39947c0a8f580002cc96a716caecc4bcd988644ad78b01ae2e9a9792c726604e","ssdeep":"768:O6T4cK2yQ6eO1P2WgcdxazvszXIgBB1ARna76Ae/FqsSwYxRrqhlr3NqR:m1Q6eO4+IUzXXsjvi1alrcR","tlshash":"6153e88535d9b0ab42837878946f310bf2ab6d52641c8410db1dd4dabcb4e49e63ffe8","first_seen":"2024-05-16T20:37:02Z","last_seen":"2026-08-08T01:42:37.375565Z","times_seen":15254,"resource_available":true,"data":null}},"time_used":967,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-21","alert":"Hunting_JS_WebAssembly","trigger":"v6nvec5.sbs/rlottie-wasm.f013598f1b2ba719f25e.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"v6nvec5.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}