{"report_id":"94e4b22d-4b35-4af6-81d3-ea64066f9eda","version":0,"status":"done","tags":[],"date":"2026-09-22T14:03:34Z","url":{"schema":"https","addr":"marketplace.merchant-cashier-date.cfd/gets/VQZCV7N78J.html","fqdn":"marketplace.merchant-cashier-date.cfd","domain":"merchant-cashier-date.cfd","tld":"cfd"},"ip":{"addr":"172.67.193.58","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"marketplace.merchant-cashier-date.cfd/gets/VQZCV7N78J.html","fqdn":"marketplace.merchant-cashier-date.cfd","domain":"merchant-cashier-date.cfd","tld":"cfd"},"title":"帶價pm","dom":{"size":1666,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (319)","md5":"9c24e8835f8443ddefb0b3de7fc1d80c","sha1":"1321990a81093c1bf7eb6f88238f32b8dee819e5","sha256":"f320fc11ef96c06ce13afb669ed9851a8e310fadddad7b4d32b5fc15dfd14551","sha512":"66fcfb16318cc7158d8cd562507b256b78011fd754b797f4d9f2d421bae9fff78d972e7301f391e9e792a36cc6095c7863f9c4d2dd07f5b699bdb73185e17201","ssdeep":"","tlshash":"5231fcb38f225caaa234c3104acb394c96385993a375c965bbd5b14f0ad4fe5c0b3786","dom_hash":"domhash7cf4b9921eae6d7354074157207d6ea8","first_seen":"2026-09-22T14:03:41.534861Z","last_seen":"2026-09-22T14:03:41.534861Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"marketplace.merchant-cashier-date.cfd/gets/VQZCV7N78J.html","fqdn":"marketplace.merchant-cashier-date.cfd","domain":"merchant-cashier-date.cfd","tld":"cfd"},"ip":{"addr":"172.67.193.58","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T14:03:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ab.frostbay.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"ab.frostbay.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"marketplace.merchant-cashier-date.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"marketplace.merchant-cashier-date.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ab.frostbay.cfd","ip":{"addr":"172.67.177.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":2,"received_data":1502,"sent_data":1075,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"marketplace.merchant-cashier-date.cfd","ip":{"addr":"172.67.193.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-15","domain_rank":0,"first_seen":"2026-09-22T13:41:26.390523Z","last_seen":"2026-09-22T13:41:26.390523Z","alert_count":8,"request_count":4,"received_data":7588,"sent_data":2125,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"marketplace.merchant-cashier-date.cfd/route-loader.js?v=20260918-3","fqdn":"marketplace.merchant-cashier-date.cfd","domain":"merchant-cashier-date.cfd","tld":"cfd"},"ip":{"addr":"172.67.193.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb1506c84fa3c4a161a24e6f2d981704","sha1":"35d7601af94043e633ccfa75f87134b14bf5fb77","sha256":"6ce987304814cd941ff8e8eb0fbe57451373bd23db56a1388480ebcde435d82e","sha512":"a3f0ffeeeae6e55694ee851057837c1680d014b22afaa147e16dc5c1da4b75f58fed53f76461a922b639c7d18d3c9bfbdd44a0339d2a342b6ba1f9fc13df57af","ssdeep":"","tlshash":"db61a43c1df70a3156e7525e7b6fb06ab260d0620087d911bdaee45c5fe0d981a3dacc","size":3208,"data":"","first_seen":"2026-09-22T13:35:41.851688Z","last_seen":"2026-09-22T21:11:27.225208Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marketplace.merchant-cashier-date.cfd/gets/VQZCV7N78J.html","fqdn":"marketplace.merchant-cashier-date.cfd","domain":"merchant-cashier-date.cfd","tld":"cfd"},"ip":{"addr":"172.67.193.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"55053232a7555855a8469ac8b8fa938b","sha1":"420b7be0a33a3620af818db0fa33d63a2e62a78e","sha256":"4988c302c4600b85637246463850634d930ef2a808da2befdbfdf16cca821cd0","sha512":"384a34406173e90c1c4ed7f38d62977ca342e76f531b638555031dd2ee96473aaa6a237b1ddabca3700727344b6a41abe923b55aacd9612a011a9d4e3c257613","ssdeep":"","tlshash":"318004d0574d0c57111cd307cd47313d340c1d5d5101450c450df44130304c70471340","size":37,"data":"","first_seen":"2026-09-22T14:03:41.557063Z","last_seen":"2026-09-22T21:11:27.236203Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ab.frostbay.cfd/route-health.php?nonce=mucquxbx7h7zbhatv9u","fqdn":"ab.frostbay.cfd","domain":"frostbay.cfd","tld":"cfd"},"ip":{"addr":"172.67.177.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marketplace.merchant-cashier-date.cfd/gets/VQZCV7N78J.html","date":"2026-09-22T14:03:07.382Z","timestamp":1790085787382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frostbay.cfd","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 06:20:34 GMT","end":"Fri, 18 Dec 2026 06:20:33 GMT"},"fingerprint":{"sha1":"3F:58:12:F6:1E:9E:62:C2:C0:8A:7D:5B:75:FB:44:96:17:B2:38:8E","sha256":"05:01:02:CF:50:47:43:E7:D1:8F:15:DE:2A:86:33:89:CE:77:24:04:A3:FE:7F:D8:D6:C5:CA:6B:CF:90:E3:C0"}}},"request":{"raw":"GET /route-health.php?nonce=mucquxbx7h7zbhatv9u HTTP/1.1\r\nHost: ab.frostbay.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://marketplace.merchant-cashier-date.cfd/\r\nOrigin: https://marketplace.merchant-cashier-date.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 14:03:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gj7%2BhjsERyw3qp1EYP44K8mL%2Fqu%2BzG8YiHkzb7uGN%2BSDfcCnXa488r12O6K4SmuNolHke3k4UbzOlzh4P6Xoq9QFRiLooaMcn%2FDQXc0%2BLfxQvwJrWIXwZcioFDxsFi41xNg%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f1d9ec0f0e2c33-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64,"size_decoded":824,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d154ea6bbe1c2f6a1f597d7b026628b0","sha1":"c32176a5f941f823d6e16993cd01c1d5416adce3","sha256":"d38112615586b481f0494cabd7e9c17e797d4933cec7b61d4a40134ea8bd6582","sha512":"ebdb686fb1f58e08acd0d0356a224d0424378a6abc033db4c0d8e9feecd00fb6035f716bc71843da34c8e685c9f58c540575159fef6fde4ba5ef785a6aeae1ef","ssdeep":"","tlshash":"c9a0021956818de11e258b723c610ac2616d10f300a855f40bb9ce469e9efac8045062","first_seen":"2026-09-22T14:03:41.541163Z","last_seen":"2026-09-22T14:03:41.541163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":0,"dns":109,"connect":30,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ab.frostbay.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"ab.frostbay.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ab.frostbay.cfd/get/VQZCV7N78J","fqdn":"ab.frostbay.cfd","domain":"frostbay.cfd","tld":"cfd"},"ip":{"addr":"172.67.177.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://marketplace.merchant-cashier-date.cfd/gets/VQZCV7N78J.html","date":"2026-09-22T14:03:07.922Z","timestamp":1790085787922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frostbay.cfd","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 06:20:34 GMT","end":"Fri, 18 Dec 2026 06:20:33 GMT"},"fingerprint":{"sha1":"3F:58:12:F6:1E:9E:62:C2:C0:8A:7D:5B:75:FB:44:96:17:B2:38:8E","sha256":"05:01:02:CF:50:47:43:E7:D1:8F:15:DE:2A:86:33:89:CE:77:24:04:A3:FE:7F:D8:D6:C5:CA:6B:CF:90:E3:C0"}}},"request":{"raw":"GET /get/VQZCV7N78J HTTP/1.1\r\nHost: ab.frostbay.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 14:03:07 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6B16%2FMkEeowhqauejw5a8%2BoMF7uoMf1YA1pYDgVcEAmGO%2BCLKIoBREB%2F%2BlcbyE4xr6gcwdU317U15eYZuBrH0g0tX9loSIhWCuMG4x4diRAq%2FvS%2FLNBPrNbOKkOlcKlGJo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a3f1d9eed8395419-CPH\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"ab.frostbay.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"ab.frostbay.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marketplace.merchant-cashier-date.cfd/gets/VQZCV7N78J.html","fqdn":"marketplace.merchant-cashier-date.cfd","domain":"merchant-cashier-date.cfd","tld":"cfd"},"ip":{"addr":"172.67.193.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T14:03:06.291Z","timestamp":1790085786291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"merchant-cashier-date.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 05:50:08 GMT","end":"Mon, 14 Dec 2026 05:50:07 GMT"},"fingerprint":{"sha1":"73:57:10:C0:07:4B:FA:33:42:8C:1C:A9:58:2D:01:51:CC:9A:D8:71","sha256":"64:FB:D5:40:DF:DA:47:8C:E3:1A:22:E2:5A:97:A5:22:C9:61:05:F9:73:C5:91:5F:33:CD:88:9E:8C:67:5C:97"}}},"request":{"raw":"GET /gets/VQZCV7N78J.html HTTP/1.1\r\nHost: marketplace.merchant-cashier-date.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 14:03:06 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HRll0bTk%2FAyKfCUh8EDeXAKbzSve4RW9QMOCxRXDpEFmfOefnJiHeubyu4BvBw%2BICdUM%2BRFR%2B5o0YSKdm2Jdso2Q1dvmc9YVXmHPQU0HUigQJrNY5Bj8SlsbLauTke%2Bmpk10heKMqylF%2Fou2XZ7SKkUmYpKwRtmN\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3f1d9e4edcb53db-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1333,"size_decoded":1259,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"2c742ddc37cad9ffe95c2ab726a031f8","sha1":"0c18485fb75caad54ff94655bd6057163b34bca2","sha256":"4ea274fd42135b40e2e9be121944293033c841af388afd43203fe63a6b4127e5","sha512":"399a6fee572f8fe7c046b65afd5c06518082de28bdba81d25c569cd3bf340bda1ce36a939ba3c5837e47bb3dc901cd716e4378c73166f97365ed0299e27df787","ssdeep":"","tlshash":"0921ceb35f2188da6278c2241edb354c92391997a3b5cc647ad1b14b4ac5fd1c0f3787","first_seen":"2026-09-22T14:03:41.546994Z","last_seen":"2026-09-22T21:11:27.230641Z","times_seen":2,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":50,"connect":31,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"marketplace.merchant-cashier-date.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"marketplace.merchant-cashier-date.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marketplace.merchant-cashier-date.cfd/route-loader.js?v=20260918-3","fqdn":"marketplace.merchant-cashier-date.cfd","domain":"merchant-cashier-date.cfd","tld":"cfd"},"ip":{"addr":"172.67.193.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marketplace.merchant-cashier-date.cfd/gets/VQZCV7N78J.html","date":"2026-09-22T14:03:06.969Z","timestamp":1790085786969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"merchant-cashier-date.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 05:50:08 GMT","end":"Mon, 14 Dec 2026 05:50:07 GMT"},"fingerprint":{"sha1":"73:57:10:C0:07:4B:FA:33:42:8C:1C:A9:58:2D:01:51:CC:9A:D8:71","sha256":"64:FB:D5:40:DF:DA:47:8C:E3:1A:22:E2:5A:97:A5:22:C9:61:05:F9:73:C5:91:5F:33:CD:88:9E:8C:67:5C:97"}}},"request":{"raw":"GET /route-loader.js?v=20260918-3 HTTP/1.1\r\nHost: marketplace.merchant-cashier-date.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marketplace.merchant-cashier-date.cfd/gets/VQZCV7N78J.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 14:03:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 18 Sep 2026 12:24:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tXzys2JHSZKaLbL8NAKh%2BmSK1RDlOr0Ukb50RTLoFLuvM2rOjvadvnBEq%2FcBwZeWRNjfgDemkeUvmcpRDe62sfqgFBl0ol0oYH4iOVkup9TLyt7ChhtSfWH3BesZF9ahaSXkYnShXJrDn0SYxmioyOLCSA%2Fwpq1C\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6aad2d75-c88\"\r\nexpires: Wed, 23 Sep 2026 01:36:12 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1613\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f1d9e89f5753db-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3208,"size_decoded":2326,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (327)","md5":"fb1506c84fa3c4a161a24e6f2d981704","sha1":"35d7601af94043e633ccfa75f87134b14bf5fb77","sha256":"6ce987304814cd941ff8e8eb0fbe57451373bd23db56a1388480ebcde435d82e","sha512":"a3f0ffeeeae6e55694ee851057837c1680d014b22afaa147e16dc5c1da4b75f58fed53f76461a922b639c7d18d3c9bfbdd44a0339d2a342b6ba1f9fc13df57af","ssdeep":"","tlshash":"db61a43c1df70a3156e7525e7b6fb06ab260d0620087d911bdaee45c5fe0d981a3dacc","first_seen":"2026-09-22T13:35:41.851688Z","last_seen":"2026-09-22T21:11:27.225208Z","times_seen":4,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"marketplace.merchant-cashier-date.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"marketplace.merchant-cashier-date.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marketplace.merchant-cashier-date.cfd/urls.json?t=1790085787000","fqdn":"marketplace.merchant-cashier-date.cfd","domain":"merchant-cashier-date.cfd","tld":"cfd"},"ip":{"addr":"172.67.193.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marketplace.merchant-cashier-date.cfd/gets/VQZCV7N78J.html","date":"2026-09-22T14:03:07.002Z","timestamp":1790085787002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"merchant-cashier-date.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 05:50:08 GMT","end":"Mon, 14 Dec 2026 05:50:07 GMT"},"fingerprint":{"sha1":"73:57:10:C0:07:4B:FA:33:42:8C:1C:A9:58:2D:01:51:CC:9A:D8:71","sha256":"64:FB:D5:40:DF:DA:47:8C:E3:1A:22:E2:5A:97:A5:22:C9:61:05:F9:73:C5:91:5F:33:CD:88:9E:8C:67:5C:97"}}},"request":{"raw":"GET /urls.json?t=1790085787000 HTTP/1.1\r\nHost: marketplace.merchant-cashier-date.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://marketplace.merchant-cashier-date.cfd/gets/VQZCV7N78J.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 14:03:07 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Eixq7K%2FTyApRVIcwgXq1FLuB%2BPccYsf7%2BamCjlasy0%2BSOmjrsvBVpBeEE0V1%2BF8DnZSKP2RSO9MDNWtbLsQpKJvLu7P8iMirSjaCPaHdsEVLOq1BsaLie81HkO2pYWWIO4kDmKn3UsXeKkmsQg8V0RLY5Jof2WJ\"}]}\r\nlast-modified: Sat, 19 Sep 2026 07:26:33 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aae3929-97\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3f1d9e8df6d53db-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":774,"mime_type":"application/json","magic":"JSON text data","md5":"84c06d044feb1afa4b812d59ecf6cb57","sha1":"52977c6cfeef4a3d492333ae8c337adb603ab616","sha256":"0d97bf75136d4c41181269875d21e34a66b7054708ed462ce4eb864e287bb8e6","sha512":"cfd16afe4f406dbd60065616108ed20cb672060ec9207ec18c8d19244dd69081b43eefbfc20ef04f637dc038384d74e74a4591ddf397fb1038c4754c2dc81cea","ssdeep":"","tlshash":"a3c001a304912068d28c03a4c089362ca70aa9aa2ec2aa26a343c0044e2a2f3026c18b","first_seen":"2026-09-22T13:35:41.853623Z","last_seen":"2026-09-22T21:11:27.231565Z","times_seen":4,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"marketplace.merchant-cashier-date.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"marketplace.merchant-cashier-date.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marketplace.merchant-cashier-date.cfd/favicon.ico","fqdn":"marketplace.merchant-cashier-date.cfd","domain":"merchant-cashier-date.cfd","tld":"cfd"},"ip":{"addr":"172.67.193.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://marketplace.merchant-cashier-date.cfd/gets/VQZCV7N78J.html","date":"2026-09-22T14:03:07.106Z","timestamp":1790085787106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"merchant-cashier-date.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 05:50:08 GMT","end":"Mon, 14 Dec 2026 05:50:07 GMT"},"fingerprint":{"sha1":"73:57:10:C0:07:4B:FA:33:42:8C:1C:A9:58:2D:01:51:CC:9A:D8:71","sha256":"64:FB:D5:40:DF:DA:47:8C:E3:1A:22:E2:5A:97:A5:22:C9:61:05:F9:73:C5:91:5F:33:CD:88:9E:8C:67:5C:97"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: marketplace.merchant-cashier-date.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marketplace.merchant-cashier-date.cfd/gets/VQZCV7N78J.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 14:03:07 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UAzv%2FauM4vlKcBDqONtWlVBJsIwTy0BptIjjxRX6s29dCpwV51XtE1WkCrx5eKIJzFGyxmrCf3PJOVJCJ%2FXHfxb6j48EgHf3ESO%2F3U%2B1I8ECq8JREh80a%2FdsJdJAyicEYE5u8y9xq7Q5QFe9xpOkfK%2BuN4tqQhLg\"}]}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a3f1d9e97fb953db-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":764,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-22T22:36:22.643524Z","times_seen":561852,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"marketplace.merchant-cashier-date.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"marketplace.merchant-cashier-date.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}