{"report_id":"94f2f023-6277-4054-9809-65ba0b40043a","version":0,"status":"done","tags":[],"date":"2026-08-25T13:53:51Z","url":{"schema":"https","addr":"notepadpiusplus.com/","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"notepadpiusplus.com/","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"title":"Notepad++ (Plus Plus) - The Ultimate Code Editor for Windows","dom":{"size":23062,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (728)","md5":"5e55a3dc4bdb6f3271d63113f17effb2","sha1":"1e47c50ad1f62c9820aa11591aa1a16e233dee20","sha256":"0b8914f0e350560b7dc3f87324790a4d181632134a60da0b07efb8897b504d36","sha512":"45366630fee5db7263f56e368e710e3953938495963b4ddb5412b27dbd1759fca3df8c9be576e307529e4c3688a3646b039015a81a57426922411c4bf692e654","ssdeep":"384:u94ZG5WlxQCeMyitEKR7ogg7at7lW6GUwd0bXssQrxHl4fXkGntFAkNF9m:uW6MyifRvgWtZWHyB7NntFAkNF9m","tlshash":"eca2d6a7b3e10623595315ab9a56ef381fba0103ce00ed14796c547a4fc6dc08e7be9a","dom_hash":"domhash166dff911dcecf36a8bff0bcf2f943fd","first_seen":"2026-08-25T13:53:53.264869Z","last_seen":"2026-08-25T13:53:53.264869Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"notepadpiusplus.com/","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T13:53:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-23T22:33:38.023236Z","alert_count":0,"request_count":1,"received_data":495729,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"notepadpiusplus.com","ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-09","domain_rank":0,"first_seen":"2026-04-25T01:21:07.96028Z","last_seen":"2026-08-25T13:45:15.501564Z","alert_count":28,"request_count":14,"received_data":1650918,"sent_data":7029,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"notepadpiusplus.com/","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ebe83525f1ac70667c9a67e8a720d53","sha1":"db98878bc61eb5a97fef4e46b2f554364c336a15","sha256":"d6119d890cecec92067faa93c9e12da814dd452ed8639eb3cd9efafd7d20a383","sha512":"75eccbd10e2402ef036db5d4ba73448515c4962c1ca0c1a8dcb94fa610decb5a45c753b1b02c4ff66c794113c62ca92637b844e29b1f4e39f92767641f345e6b","ssdeep":"","tlshash":"b5c08c8c221b0c7052e72a010b7fa600b0453202a4905a213d0e22044f21d0bab58854","size":167,"data":"","first_seen":"2026-07-25T02:54:20.464467Z","last_seen":"2026-08-25T13:53:53.274076Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"27b12856f774381d7ae630b9d0d23dc1","sha1":"c3e9e0994cc674ee3880baeff8efb6d7bdcf51bf","sha256":"23ecdb5b765262be1a4996cb669b6f5ce79a383f3ab9ecb49d7aa90a1c461dfb","sha512":"9d628d3833cd492c3be325a043230efefc1eb85377147b484d8aa5d42f5ffd95fc2cc4c1120409d93b45fb28db8d23dca701af548e6c04d6912940a4c4df67e7","ssdeep":"","tlshash":"3ae0722e30c2103a03b354a623bb810a2126270bc49e8b127e9fc5da5f28ca1060224c","size":319,"data":"","first_seen":"2026-07-25T02:54:20.466193Z","last_seen":"2026-08-25T13:53:53.274675Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"78475566f836afe7acbb8a98878f2315","sha1":"88a24da5db4d5f6c2d60a00cd0947fd028c6d86e","sha256":"25f3af34015a53002770ee41f944a4fe2cf24213f79135b465b053e19ccdc424","sha512":"e6ae7384b537cbc6987808f1387edcfac4b429381b12402278c7aa830c069a3f20ff4058ae2911689420c4d15373140d62414ec42d8ddfe89b2890c35dde610c","ssdeep":"","tlshash":"6ab092933a60875bd82fc31b9042c12a5c2282231e322586c82dea054488a02eac94c5","size":123,"data":"","first_seen":"2026-04-25T01:22:14.60086Z","last_seen":"2026-08-25T13:53:53.277737Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c612b4f504d88b291c38d4f70bc087e","sha1":"99f37fe7714dc5a3253d42ed4392547cd2a3ff53","sha256":"e02d7a48cdc0a0cac4d327138c8a8259553b6334d430b9100f52245161cb2ba6","sha512":"3bf7e8aeedf5354b195a60c9c094e576c1188e976f18dc4c4bf4b004c439a06ea9a1cdd2dad049cf8d4c21a4a4cc98f3b2c72d9ddc55b8c73b14d0495533bdc8","ssdeep":"","tlshash":"18c0805f31724431c9df75575d9693a43d7044245d011446145cc4e1bc31d5a183f5c5","size":172,"data":"","first_seen":"2026-04-16T07:43:03.702986Z","last_seen":"2026-08-25T13:53:53.278266Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5096724a6f798d12e4a7d9e9895cd1aa","sha1":"033c3ffd60b036bd2dcb0dd65f3aeb0b988a4e34","sha256":"14037cc7a0ebdead4cc25be6be073d4348dafa3e190687e9da1859848fa4abda","sha512":"61179c60e86246efed252a758d5f1977a85566e781e62504250a8661130a8ec743befe0a2164d619f0577977fa6be98ceeeb5b01e10e683ddf65be576a4e4f0c","ssdeep":"96:CiNixD6lLF/78Sq61eNdjt9GNiND6lLF/78Sq6reNdjtI:dnHA9sFHA9I","tlshash":"b29158afa78315328ce7367b5aaed7b827bb41432c40f9003c1c54145f95da49eaee85","size":4353,"data":"","first_seen":"2026-07-25T02:54:20.471839Z","last_seen":"2026-08-25T13:53:53.278732Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"deaae55828c12fc2ab08e064a21075ee","sha1":"71caffa2f9d307deb3e2818332a5623437a42951","sha256":"75984818f17dc1c4efed5f6a7362b722f5eb7962b741603f781db70ffd9c0924","sha512":"6194f4f744a8ec4dc9e8ffba94d23e5361fc2457aac089b8a64138c691f669b58b5e2c8c02e0746780ce50e6c9bd417371992cce834e031d5f149cb5d24ef13d","ssdeep":"","tlshash":"1f01103e724aa2ba46461443891dba42a97ab5e72857d8a50018f884febcf818437e57","size":734,"data":"","first_seen":"2026-08-25T13:44:01.126352Z","last_seen":"2026-08-25T14:08:49.25623Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/direct_download.js","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8a165159cb065ea8f07f882deebae83","sha1":"2453f6447eb016236caa471380b92f6bb29c2f16","sha256":"2c577c8909d438b92c35e147c8f234b9b62020eeb400b37b93e9600ad9722bf5","sha512":"6f87b5626b43fd69b248b7ee8c4e48cf0d1340331e9e68cb9ced99b034d82998a3c119c3db31498adb7c7d1f54a7d869c202f61046900479396ce4575d0e49dc","ssdeep":"","tlshash":"cb31e20e31e5a579062b1281838f5f8193159157915cc51d7c3e474aafb2764b063ecb","size":1825,"data":"","first_seen":"2026-07-25T02:54:20.456684Z","last_seen":"2026-08-25T13:53:53.267429Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KP2HLBNQ82","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"18cf117c8985a921a80014ea9ba29a40","sha1":"95fb0b8b47eb901ed41cb749135197541821856d","sha256":"30f2f49d97f3b0c1a6d5fdd4d06f8f723f51b3a871be755105b503bc24166310","sha512":"75966d5c691f270c714615b0b942e71a29f66b27f5ec72c87f8ae2473609252eb9f3e5e37b6e25d9a8208abdcd4b90f7f4ab9ad77732c517fe6b80cdbde9a422","ssdeep":"6144:NPS2Er+ZMiL+tdZd84SI96HWcqh6WhEOs3yQSfaO7slhKmMkAvPAR:sauuE7fJslcwwYR","tlshash":"d9b4e8ce73d674229396f479902f01cba57b28a2b44cc8a5f189ccd42e74a9a4177f7c","size":495125,"data":"","first_seen":"2026-08-25T13:45:16.822802Z","last_seen":"2026-08-25T13:53:53.27225Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"notepadpiusplus.com/pagead2.googlesyndication.com/pagead/show_ads.html","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://notepadpiusplus.com/","date":"2026-08-25T13:53:23.433Z","timestamp":1787666003433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:32:03 GMT","end":"Tue, 13 Oct 2026 04:29:20 GMT"},"fingerprint":{"sha1":"5B:BD:40:C2:4F:4B:DE:52:47:72:74:07:E0:06:AA:0C:25:78:7D:18","sha256":"AE:CD:67:5B:47:4C:F2:6A:05:6F:E2:50:F3:85:1F:D7:EC:4E:2B:97:94:C3:F1:30:CE:45:A4:F0:30:60:BB:E7"}}},"request":{"raw":"GET /pagead2.googlesyndication.com/pagead/show_ads.html HTTP/1.1\r\nHost: notepadpiusplus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 13:53:23 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7bVCxavuHTLm7OSjpj%2BfClAmTC4LGnEbD2oAIU4KCkDzAtOkaAC2NjgVHHURpg0t2zVQnj07sfDOgHDjxaP6hMvE8qTPOX2uP%2BaGBhcyQZoTa9jSdh6YW9hh03LFKq6JWj6nS6BG\"}]}\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a30b152979272678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":679,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-25T16:41:39.132756Z","times_seen":553820,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/direct_download.js","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://notepadpiusplus.com/","date":"2026-08-25T13:53:23.435Z","timestamp":1787666003435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:32:03 GMT","end":"Tue, 13 Oct 2026 04:29:20 GMT"},"fingerprint":{"sha1":"5B:BD:40:C2:4F:4B:DE:52:47:72:74:07:E0:06:AA:0C:25:78:7D:18","sha256":"AE:CD:67:5B:47:4C:F2:6A:05:6F:E2:50:F3:85:1F:D7:EC:4E:2B:97:94:C3:F1:30:CE:45:A4:F0:30:60:BB:E7"}}},"request":{"raw":"GET /direct_download.js HTTP/1.1\r\nHost: notepadpiusplus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 13:53:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 15 Jul 2026 07:13:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a573313-721\"\r\nexpires: Wed, 26 Aug 2026 01:44:42 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 521\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HNVj1pUBX59hP0zIJ4MwjIiu1Wjtg1BxqU2zFr1rtDW%2FU5jEWzHmUhPHEu%2FDTeGzUGwiaxj571%2B3kRsX7y4K4EC7l6Y4f3aVS63Fe%2BZhMP%2Fq0ugvfmYib0H87PJkthfRH0I0A5n4\"}]}\r\ncf-ray: a30b152979282678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1825,"size_decoded":1525,"mime_type":"application/javascript","magic":"ASCII text","md5":"f8a165159cb065ea8f07f882deebae83","sha1":"2453f6447eb016236caa471380b92f6bb29c2f16","sha256":"2c577c8909d438b92c35e147c8f234b9b62020eeb400b37b93e9600ad9722bf5","sha512":"6f87b5626b43fd69b248b7ee8c4e48cf0d1340331e9e68cb9ced99b034d82998a3c119c3db31498adb7c7d1f54a7d869c202f61046900479396ce4575d0e49dc","ssdeep":"","tlshash":"cb31e20e31e5a579062b1281838f5f8193159157915cc51d7c3e474aafb2764b063ecb","first_seen":"2026-07-25T02:54:20.456684Z","last_seen":"2026-08-25T13:53:53.267429Z","times_seen":5,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/media/feature%20(2).jpg","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://notepadpiusplus.com/","date":"2026-08-25T13:53:23.558Z","timestamp":1787666003558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:32:03 GMT","end":"Tue, 13 Oct 2026 04:29:20 GMT"},"fingerprint":{"sha1":"5B:BD:40:C2:4F:4B:DE:52:47:72:74:07:E0:06:AA:0C:25:78:7D:18","sha256":"AE:CD:67:5B:47:4C:F2:6A:05:6F:E2:50:F3:85:1F:D7:EC:4E:2B:97:94:C3:F1:30:CE:45:A4:F0:30:60:BB:E7"}}},"request":{"raw":"GET /media/feature%20(2).jpg HTTP/1.1\r\nHost: notepadpiusplus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 13:53:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Feb 2026 21:45:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"698a5579-5b004\"\r\nexpires: Thu, 24 Sep 2026 13:44:42 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 520\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2v9pv9EUtzihpcfm2SmMLP88qBlRoWUPN03rtbif0dgtgFDXs3%2FXUWkVM0NmmxKIkcFJFnLjHX6bLmfjES7PrDDzm5cnoMQ2BH2nORz3XgFsKTD3H%2BJoazdyJTXsBQiySywrNkdO\"}]}\r\ncf-ray: a30b152a39352678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":372740,"size_decoded":340144,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, height=0, software=Picsart, orientation=upper-left, datetime=2026:02:10 00:41:09, width=0], baseline, precision 8, 1919x1080, components 3","md5":"e51ce9d41b6f5ca30d2da6280ba76fee","sha1":"bdcab2a56a7f8da35d7d2538d35c8fa4ae201863","sha256":"9cd98a8e28d3a7beb19991a488085f373654ec57e3090b2fe0ff43d41484f9b4","sha512":"8f677cdde7f1213c5253e067ebda6f390519d385beb3a2837a124ed044d406af57190a1945290f6946fb13b4562d88f1cd97044fb406bb7295d1b993fe3705d2","ssdeep":"6144:17BffffffffffffffffffffffffffffffRFkfffpfff3Qslffff4g1mfffTsjGf1:17Bffffffffffffffffffffffffffff/","tlshash":"6f84e0012e6fc4d66d73e1fea8811b0b1ecc01dc6962359edec13979f297a61d528ec8","first_seen":"2026-04-25T01:22:14.570969Z","last_seen":"2026-08-25T14:08:49.23677Z","times_seen":14,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/media/feature%20(3).jpg","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://notepadpiusplus.com/","date":"2026-08-25T13:53:23.559Z","timestamp":1787666003559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:32:03 GMT","end":"Tue, 13 Oct 2026 04:29:20 GMT"},"fingerprint":{"sha1":"5B:BD:40:C2:4F:4B:DE:52:47:72:74:07:E0:06:AA:0C:25:78:7D:18","sha256":"AE:CD:67:5B:47:4C:F2:6A:05:6F:E2:50:F3:85:1F:D7:EC:4E:2B:97:94:C3:F1:30:CE:45:A4:F0:30:60:BB:E7"}}},"request":{"raw":"GET /media/feature%20(3).jpg HTTP/1.1\r\nHost: notepadpiusplus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 13:53:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Feb 2026 21:45:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"698a5579-2dcf9\"\r\nexpires: Thu, 24 Sep 2026 13:44:42 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 521\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SPAV9T5bJ7F7YmciJG0PVb%2BGJKmceqY93nQ9E4RSfR7sw1DlU5fmgmVhcIEiNY9XjqN0h48h5As74CGo%2FhIn0FpN5WTGN2D7NkTo%2F2zwPFJSlyo8f24zMBxIzERonaI80Pjpxn52\"}]}\r\ncf-ray: a30b152a49382678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187641,"size_decoded":152163,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, height=0, software=Picsart, orientation=upper-left, datetime=2026:02:10 00:44:41, width=0], baseline, precision 8, 1919x1080, components 3","md5":"d0673df9420dddf937d8a64683517332","sha1":"adace107bc71a379104263008edb76323a1c0271","sha256":"de78bbed34fea8c7b1578372f9da628100439e905acd1cb0a6c93c17a81879be","sha512":"2adf910ad95c19f4af64f59f4af787bf00d2b1f118da053d44b40fab41575c60ec0defcdd57d22cd233930260e49a231e2f39eaad8443d79b9a23ac91565fe47","ssdeep":"3072:p8+9Aw0caAS2ZIvs5LY+rhg+n8pKsKYR84K/LgY:h9Aw0BfvgYAe+n8pKs9xosY","tlshash":"7b047c81ad6259905eaf0bf66c839503e69a5020bff7fe3c1d563de4ea11f0d8746342","first_seen":"2026-04-25T01:22:14.588915Z","last_seen":"2026-08-25T14:08:49.249967Z","times_seen":11,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/media/feature%20(5).jpg","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://notepadpiusplus.com/","date":"2026-08-25T13:53:23.562Z","timestamp":1787666003562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:32:03 GMT","end":"Tue, 13 Oct 2026 04:29:20 GMT"},"fingerprint":{"sha1":"5B:BD:40:C2:4F:4B:DE:52:47:72:74:07:E0:06:AA:0C:25:78:7D:18","sha256":"AE:CD:67:5B:47:4C:F2:6A:05:6F:E2:50:F3:85:1F:D7:EC:4E:2B:97:94:C3:F1:30:CE:45:A4:F0:30:60:BB:E7"}}},"request":{"raw":"GET /media/feature%20(5).jpg HTTP/1.1\r\nHost: notepadpiusplus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 13:53:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Feb 2026 21:45:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"698a5579-3e597\"\r\nexpires: Thu, 24 Sep 2026 13:44:42 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 520\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZXN0XruxCQpc40d%2FOKu3YbRGK4nf%2FTOq2QR0wGYVyrtnErpGQjP3P9OLMtAzgl8HZyI3mffzKfLnABg%2FBootPJh8%2FGygZfxPLQeJTMYthVYwomCYtqcluM2RXJdvQMmWUx3a8vzF\"}]}\r\ncf-ray: a30b152a49392678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255383,"size_decoded":223872,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, height=0, software=Picsart, orientation=upper-left, datetime=2026:02:10 00:35:17, width=0], baseline, precision 8, 1919x1080, components 3","md5":"d534f9aaf1a10a709d47026cacdc6def","sha1":"744eeba9a02de19808dc178c97e8bbf4abc8283b","sha256":"8888c33f2cb6649b3195a17f8ebf99f5062b82ebeb0ceeb116a6ca10510cab4c","sha512":"6d1aa1457c78ad1ea3a21197ab7c62292d5dec7a53b365e417ae7f10bf3b432d235eff89e2c38324ecd168290777a9282913d36c5e44c65443aa647c2eeecad4","ssdeep":"6144:3Q2iHIb6l66/x4SFQaILelHlocuoC4lSDBg:g9eS/L3Xocs4SBg","tlshash":"d744020db5729e9ff43fabb6330b956503a5b975047b09c622638856b0bc334e907da3","first_seen":"2026-04-25T01:22:14.577039Z","last_seen":"2026-08-25T14:08:49.250781Z","times_seen":14,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/media/icon.png","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notepadpiusplus.com/","date":"2026-08-25T13:53:23.443Z","timestamp":1787666003443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:32:03 GMT","end":"Tue, 13 Oct 2026 04:29:20 GMT"},"fingerprint":{"sha1":"5B:BD:40:C2:4F:4B:DE:52:47:72:74:07:E0:06:AA:0C:25:78:7D:18","sha256":"AE:CD:67:5B:47:4C:F2:6A:05:6F:E2:50:F3:85:1F:D7:EC:4E:2B:97:94:C3:F1:30:CE:45:A4:F0:30:60:BB:E7"}}},"request":{"raw":"GET /media/icon.png HTTP/1.1\r\nHost: notepadpiusplus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 13:53:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 09 Feb 2026 21:55:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"698a57bb-c5fc\"\r\nexpires: Thu, 24 Sep 2026 13:44:42 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 521\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2FjhKtFuTfUaX94jWpRq6QfLmS3UfelRmVWTPtTUiJB5lcBb9iRMgSjk9icu6ugTElOHCNc%2Bw6fNmqOelyk2KAZVoYd2g7T6CLtAVmLvodLvfpxX5HP%2Fxh61S0I68I%2BjXVKNEmQ5\"}]}\r\ncf-ray: a30b1529892a2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50684,"size_decoded":51438,"mime_type":"image/png","magic":"PNG image data, 224 x 224, 8-bit/color RGBA, non-interlaced","md5":"f4934f99046e64f6cc6acde24e52ce8b","sha1":"d8fa6da8483824d9b169c8931771bba8a90f0fb8","sha256":"bb6689767192d574dcbe3c27a069d5245ddbc72c77750a13523ac27a0320f19a","sha512":"e2b28a2899b14d57d2c13cea62842c3f6e5ee27860b1bade96785e9631f54cbdd3b9ae603b18dfd90b6282d712cc29e9ee27a17119a39cb36e1651b02a19b792","ssdeep":"768:IXF8aXmXyho07vVZ1zuYzj5qskjqPqrDtvo+0b7NwYrynsbLjruLmFg:IVzmg7vVyYUsDaw77NwYryOiLma","tlshash":"3d3301e0a5ca09cf3de7dcf6f1bb608459428f1da9bb69fa444755a0350c239ed009f2","first_seen":"2026-04-25T01:22:14.582746Z","last_seen":"2026-08-25T14:08:49.238557Z","times_seen":12,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/media/feature%20(1).png","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://notepadpiusplus.com/","date":"2026-08-25T13:53:23.554Z","timestamp":1787666003554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:32:03 GMT","end":"Tue, 13 Oct 2026 04:29:20 GMT"},"fingerprint":{"sha1":"5B:BD:40:C2:4F:4B:DE:52:47:72:74:07:E0:06:AA:0C:25:78:7D:18","sha256":"AE:CD:67:5B:47:4C:F2:6A:05:6F:E2:50:F3:85:1F:D7:EC:4E:2B:97:94:C3:F1:30:CE:45:A4:F0:30:60:BB:E7"}}},"request":{"raw":"GET /media/feature%20(1).png HTTP/1.1\r\nHost: notepadpiusplus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 13:53:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 09 Feb 2026 22:01:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"698a5949-89fa\"\r\nexpires: Thu, 24 Sep 2026 13:44:42 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 520\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HpgPoE9x0uAv%2F2W%2B5hjXyifxR5MstlrGpq8hK2JM0mUqCy%2F031JoZToIDjD1jW%2FYxxoGSMretAZPTWEdmwR%2FMr6ZRVJcCy8SLbc1fIyxgxgt%2FVUZKh1zN8yxwKRriUpOtoUS7gRA\"}]}\r\ncf-ray: a30b152a39332678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35322,"size_decoded":35008,"mime_type":"image/png","magic":"PNG image data, 1415 x 729, 8-bit colormap, non-interlaced","md5":"40d0470ab7513b417ef10da0c4fe8fd1","sha1":"623726d58e30b605b8e4bcb3bc00febb2bd2fac9","sha256":"d39404017c3a5354d78167a4ae69178241d5fabfeea7141c79d53b233e38be3d","sha512":"8fff234506d2d1002fe4df7bbac255d4c32e1264798d172064646abbc832fff3d1c144b08327ac8a3bbfc1a960b3abbeff3e0cda88570f6997555406e02f1c78","ssdeep":"768:F+M7QcJguFiA9vcDzbcf7M3hf/81khb5YBJcqVEQIlrA5u8aJRFQ+drJ:v7qq9kDAMx/81koJfVVIVAA1nFQirJ","tlshash":"7ef2f1e491e855924857e3f302f14747bcbc1f7d208372095ae7e05160c92d6b9c6bad","first_seen":"2026-02-02T18:40:33.076912Z","last_seen":"2026-08-25T14:08:49.248055Z","times_seen":18,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/media/feature%20(4).jpg","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://notepadpiusplus.com/","date":"2026-08-25T13:53:23.561Z","timestamp":1787666003561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:32:03 GMT","end":"Tue, 13 Oct 2026 04:29:20 GMT"},"fingerprint":{"sha1":"5B:BD:40:C2:4F:4B:DE:52:47:72:74:07:E0:06:AA:0C:25:78:7D:18","sha256":"AE:CD:67:5B:47:4C:F2:6A:05:6F:E2:50:F3:85:1F:D7:EC:4E:2B:97:94:C3:F1:30:CE:45:A4:F0:30:60:BB:E7"}}},"request":{"raw":"GET /media/feature%20(4).jpg HTTP/1.1\r\nHost: notepadpiusplus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 13:53:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Feb 2026 21:45:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"698a5579-59b12\"\r\nexpires: Thu, 24 Sep 2026 13:44:42 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 520\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5R05PUW3uNiwlPWgia7lyUjDofRr8xlACRmEZQh4%2FWdaLEFkNf5ztE%2F7CpJCEoViPdh51sbADpdaNelV1CvM2d0jJgt6oL1lbLT7ayoq1vnaob2oX590iPQgnm01si85p8vX5lLO\"}]}\r\ncf-ray: a30b152a49372678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367378,"size_decoded":336635,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, height=0, software=Picsart, orientation=upper-left, datetime=2026:02:10 00:30:01, width=0], baseline, precision 8, 1919x1080, components 3","md5":"7af3ae87879966d5b0daca48baa671ca","sha1":"b6012179effa682a2f02ab07622a9b4b6324b54e","sha256":"e5c1df7a34b85e15c80ae162728fc0e130595fd298c8a5a00dd56f7f4d788ac5","sha512":"0af38f5ddb4478bbdbd998aabe4eaf6a6af66793c356d0ea48a77492a18a45807b160a7064ed3eeddb89ecfe2dc9506f793f90919770566c581c22fdc298366e","ssdeep":"6144:kffffffffffffffffffffffffffff2mGZSfYffffkffffbffdMffff+ffjrffffu:kffffffffffffffffffffffffffff2m2","tlshash":"1874e0446a7fd5d2ac3be0ff38911a0a1d9c10897c2375ae8c847878f796e61d42ecd8","first_seen":"2026-04-25T01:22:14.573421Z","last_seen":"2026-08-25T14:08:49.24247Z","times_seen":14,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/direct_download.js","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://notepadpiusplus.com/","date":"2026-08-25T13:53:23.626Z","timestamp":1787666003626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:32:03 GMT","end":"Tue, 13 Oct 2026 04:29:20 GMT"},"fingerprint":{"sha1":"5B:BD:40:C2:4F:4B:DE:52:47:72:74:07:E0:06:AA:0C:25:78:7D:18","sha256":"AE:CD:67:5B:47:4C:F2:6A:05:6F:E2:50:F3:85:1F:D7:EC:4E:2B:97:94:C3:F1:30:CE:45:A4:F0:30:60:BB:E7"}}},"request":{"raw":"GET /direct_download.js HTTP/1.1\r\nHost: notepadpiusplus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 13:53:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 15 Jul 2026 07:13:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a573313-721\"\r\nexpires: Wed, 26 Aug 2026 01:44:42 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 521\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M9YZIp73Ie7dz8AgYfb%2B6LjBlPCRh1hEDEIURh9T3uqkmq2WhhzgaznsTwsVoNx4isfkMPXYFwop5epLoKvDk%2FGi5ReI5%2BsJdTocIt6ZGPmFQPENS5fkcfsKf4ABpFxI5Q8SsR1%2F\"}]}\r\ncf-ray: a30b152aa93e2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1825,"size_decoded":1523,"mime_type":"application/javascript","magic":"ASCII text","md5":"f8a165159cb065ea8f07f882deebae83","sha1":"2453f6447eb016236caa471380b92f6bb29c2f16","sha256":"2c577c8909d438b92c35e147c8f234b9b62020eeb400b37b93e9600ad9722bf5","sha512":"6f87b5626b43fd69b248b7ee8c4e48cf0d1340331e9e68cb9ced99b034d82998a3c119c3db31498adb7c7d1f54a7d869c202f61046900479396ce4575d0e49dc","ssdeep":"","tlshash":"cb31e20e31e5a579062b1281838f5f8193159157915cc51d7c3e474aafb2764b063ecb","first_seen":"2026-07-25T02:54:20.456684Z","last_seen":"2026-08-25T13:53:53.267429Z","times_seen":5,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/media/logo.png","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notepadpiusplus.com/","date":"2026-08-25T13:53:23.734Z","timestamp":1787666003734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:32:03 GMT","end":"Tue, 13 Oct 2026 04:29:20 GMT"},"fingerprint":{"sha1":"5B:BD:40:C2:4F:4B:DE:52:47:72:74:07:E0:06:AA:0C:25:78:7D:18","sha256":"AE:CD:67:5B:47:4C:F2:6A:05:6F:E2:50:F3:85:1F:D7:EC:4E:2B:97:94:C3:F1:30:CE:45:A4:F0:30:60:BB:E7"}}},"request":{"raw":"GET /media/logo.png HTTP/1.1\r\nHost: notepadpiusplus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 13:53:23 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D71aW1sWRJtSy28W4HRXb8jOjGdyibP4Jh63%2BF8kCWyh5JfOw74RQOVveBG8Bns34qY5dAI44jj%2FL%2BMNA%2BKwt3mw8m1JYQDHxbIJLyW2zI3zRov1Fg%2BQEOAs%2BUdt4LWhJ0p74GBb\"}]}\r\npriority: u=6,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a30b152b594c2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":721,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-25T16:41:39.132756Z","times_seen":553820,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T13:53:22.891Z","timestamp":1787666002891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:32:03 GMT","end":"Tue, 13 Oct 2026 04:29:20 GMT"},"fingerprint":{"sha1":"5B:BD:40:C2:4F:4B:DE:52:47:72:74:07:E0:06:AA:0C:25:78:7D:18","sha256":"AE:CD:67:5B:47:4C:F2:6A:05:6F:E2:50:F3:85:1F:D7:EC:4E:2B:97:94:C3:F1:30:CE:45:A4:F0:30:60:BB:E7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: notepadpiusplus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 13:53:23 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Aug 2026 23:55:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KYQXg1Ak%2BTROcHAeLWJv5UMvRASf0xTGXy93NGu30fB2ng%2FCQKkXuL%2FJv3HdGknJiCwtmCIzKAzD5VesqBZBsIcGpg%2Bk5o1ljHluI3PVGG3D%2F%2BtRX3UXfJuhQZsQZLgqN7SHyj%2FY\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a30b152659b2b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]}],"data":{"size":22834,"size_decoded":6051,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (735)","md5":"6d2bbc62d2c3e551244f898ff6db0d25","sha1":"379f09af14e016a826fc6d7d229ddd7bac0ca91c","sha256":"1818c190f3374f626d497a645449374bb8856eb8edd2062a64f59fea11cd796d","sha512":"9d9c3ed60093fe8f0c22cf5f75627d972662b4c3c6a25b8a696cbff38c5084f17432c0c1ca5a93b51781433bbaf134718a2ad2e171db8a913de1aadaf4f54bd4","ssdeep":"384:79laBmNeywCeMyitEK4gbvW6GUwRTrX1snEOoPn/X4GntFAkNF94:7VaMyifLbvWHZSQpntFAkNF94","tlshash":"49a2e667b3e10633495314ab9a56ef382fba0143ce01ed14786c957a4fc6dc08e7be96","first_seen":"2026-08-25T13:45:16.83395Z","last_seen":"2026-08-25T13:53:53.271633Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":16,"connect":1,"send":0,"wait":140,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KP2HLBNQ82","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://notepadpiusplus.com/","date":"2026-08-25T13:53:23.429Z","timestamp":1787666003429,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:22 GMT","end":"Wed, 28 Oct 2026 20:42:21 GMT"},"fingerprint":{"sha1":"0C:36:58:3E:92:12:11:BD:3B:2C:77:32:B6:09:4D:99:02:12:5E:BB","sha256":"4C:2B:BB:AD:FE:07:99:6D:8E:58:81:DD:95:E6:E7:0B:1E:E2:BE:C1:0C:B5:DD:78:EB:1E:D6:2C:91:CE:30:0E"}}},"request":{"raw":"GET /gtag/js?id=G-KP2HLBNQ82 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 25 Aug 2026 13:53:23 GMT\r\nexpires: Tue, 25 Aug 2026 13:53:23 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 168908\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":495125,"size_decoded":169512,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6662)","md5":"18cf117c8985a921a80014ea9ba29a40","sha1":"95fb0b8b47eb901ed41cb749135197541821856d","sha256":"30f2f49d97f3b0c1a6d5fdd4d06f8f723f51b3a871be755105b503bc24166310","sha512":"75966d5c691f270c714615b0b942e71a29f66b27f5ec72c87f8ae2473609252eb9f3e5e37b6e25d9a8208abdcd4b90f7f4ab9ad77732c517fe6b80cdbde9a422","ssdeep":"6144:NPS2Er+ZMiL+tdZd84SI96HWcqh6WhEOs3yQSfaO7slhKmMkAvPAR:sauuE7fJslcwwYR","tlshash":"d9b4e8ce73d674229396f479902f01cba57b28a2b44cc8a5f189ccd42e74a9a4177f7c","first_seen":"2026-08-25T13:45:16.822802Z","last_seen":"2026-08-25T13:53:53.27225Z","times_seen":2,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":40,"receive":65,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/media/feature%20(1).jpg","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://notepadpiusplus.com/","date":"2026-08-25T13:53:23.556Z","timestamp":1787666003556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:32:03 GMT","end":"Tue, 13 Oct 2026 04:29:20 GMT"},"fingerprint":{"sha1":"5B:BD:40:C2:4F:4B:DE:52:47:72:74:07:E0:06:AA:0C:25:78:7D:18","sha256":"AE:CD:67:5B:47:4C:F2:6A:05:6F:E2:50:F3:85:1F:D7:EC:4E:2B:97:94:C3:F1:30:CE:45:A4:F0:30:60:BB:E7"}}},"request":{"raw":"GET /media/feature%20(1).jpg HTTP/1.1\r\nHost: notepadpiusplus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 13:53:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Feb 2026 21:45:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"698a5579-510c6\"\r\nexpires: Thu, 24 Sep 2026 13:44:42 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 520\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m4Giuyp9Ud3Wq5BWChB2lNR1FLs0eTLZp6JjBxEsS5xiHspKE00owasN8X9zPgCchQm1KifN%2FY7kYvitROJEIPTZa6VxYTJGOsOaLZ78wiRYN8bsOqmtqw%2B3Dk57wdPKMj%2FCnbvb\"}]}\r\ncf-ray: a30b152a39342678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331974,"size_decoded":295374,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, height=0, software=Picsart, orientation=upper-left, datetime=2026:02:10 00:37:25, width=0], baseline, precision 8, 1919x1080, components 3","md5":"b58e383320aa850ffa3eca9b16a7a7a1","sha1":"b9b4f260e85e448c084e1818747266d15de3f2e8","sha256":"9c3e02abe758d7547eaa9a93092bebd30222b614aa34dc0ff3ce8f8f1907ebd0","sha512":"af29e38d11381e41c087f1ecd55f2875dc00e9552f2e21c7a06721feaf4e8041a54b2febfc53945dd8dd27ef832fbe8bb796ade73afecb8ac025226977698e1a","ssdeep":"6144:NA4d86ceuyBjSfjLOd3DKaAQojgk1j+QJQodmxdxDjnL:i2vce9SLL0Iz0GaQWodcr3","tlshash":"7864126d0f7a863dd5fc4eb541969f8d53d08a382ef113fb66c26024c37e265ab0a21d","first_seen":"2026-04-25T01:22:14.568217Z","last_seen":"2026-08-25T14:08:49.249101Z","times_seen":14,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/s6.css","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://notepadpiusplus.com/","date":"2026-08-25T13:53:23.432Z","timestamp":1787666003432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:32:03 GMT","end":"Tue, 13 Oct 2026 04:29:20 GMT"},"fingerprint":{"sha1":"5B:BD:40:C2:4F:4B:DE:52:47:72:74:07:E0:06:AA:0C:25:78:7D:18","sha256":"AE:CD:67:5B:47:4C:F2:6A:05:6F:E2:50:F3:85:1F:D7:EC:4E:2B:97:94:C3:F1:30:CE:45:A4:F0:30:60:BB:E7"}}},"request":{"raw":"GET /s6.css HTTP/1.1\r\nHost: notepadpiusplus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 13:53:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Feb 2026 20:31:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6990dba2-327c\"\r\nexpires: Wed, 26 Aug 2026 01:44:42 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 521\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2FhJu%2BfEIEvA9GfYzsOODPYgx%2FBwbeWudr7E1PfSJ38ebFM0R3jQzhZlTAB41fD%2BNNnJfWE%2FayNQJHF0GnMeJi3FzTluPkiYR3WO%2Bjtxq0%2FIwYuIUDrt3nEAs9cXvVMMvV4W7Pzx\"}]}\r\ncf-ray: a30b152979262678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12924,"size_decoded":4092,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"6973aef59e23d8ac81e2177ed1e3367f","sha1":"493f2b47f46d5ad29787b765a576059aedc2c668","sha256":"9e656a9ab04e090983e0cb09d81df7bc2af565615f4d2808afd1195fc41e5a41","sha512":"6227af51a6d60ef4f7b6af850abb9c479faea33ea219021230a18139efae8b15a6d7965e74e91b14cf719548567536e2c12e5911022555ad847af14846e1b40d","ssdeep":"192:WevTnFgu7PxAAxkSA9kfeUJMR+K9kDaIhOOy1OwYmg6cC+97q+v9m8KsUO/Y9SCy:FWulsctE2g8xH","tlshash":"264253d7aba308417417c458abfad79a332d4113800ade7dbf98726c8fc91e899b174c","first_seen":"2026-04-25T01:22:14.590588Z","last_seen":"2026-08-25T13:53:53.273593Z","times_seen":6,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.com/media/logo.png","fqdn":"notepadpiusplus.com","domain":"notepadpiusplus.com","tld":"com"},"ip":{"addr":"104.21.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notepadpiusplus.com/","date":"2026-08-25T13:53:23.733Z","timestamp":1787666003733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:32:03 GMT","end":"Tue, 13 Oct 2026 04:29:20 GMT"},"fingerprint":{"sha1":"5B:BD:40:C2:4F:4B:DE:52:47:72:74:07:E0:06:AA:0C:25:78:7D:18","sha256":"AE:CD:67:5B:47:4C:F2:6A:05:6F:E2:50:F3:85:1F:D7:EC:4E:2B:97:94:C3:F1:30:CE:45:A4:F0:30:60:BB:E7"}}},"request":{"raw":"GET /media/logo.png HTTP/1.1\r\nHost: notepadpiusplus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 13:53:23 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=07AS8nQv884lMh9yw93GhSUBPeSVMrUMWunoroFIpOlwhzFVK%2FdPD0N%2FVhvX82O%2Bzsda8j%2B0WLyk%2FbApaJJeHJxoGZJRXwV9zclHNASRXK8PQ8HJYRWacnUqYJoEVFrEvpk8BV9e\"}]}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a30b152b594b2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":715,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-25T16:41:39.132756Z","times_seen":553820,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}