{"report_id":"94fadbb4-6de9-4165-abff-97c641e97af3","version":6,"status":"done","tags":[],"date":"2026-02-21T21:11:02Z","url":{"schema":"https","addr":"sdadsa-qqqasdsadas.lol/","fqdn":"sdadsa-qqqasdsadas.lol","domain":"sdadsa-qqqasdsadas.lol","tld":"lol"},"ip":{"addr":"104.21.47.220","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sdadsa-qqqasdsadas.lol/","fqdn":"sdadsa-qqqasdsadas.lol","domain":"sdadsa-qqqasdsadas.lol","tld":"lol"},"title":"$PENGUIN","dom":{"size":8565,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (601)","md5":"e86d87591af231b4ac04933784c0f622","sha1":"f2d7f3226dc607d2d2e69949c1ff7d6f71a04fec","sha256":"4e9cfaf9f4648e9faaa549422f534b059c2c153bfd0edd3e4981dbe4cc759623","sha512":"68efcb2a335b0880f27011386e266be60cb1f099d20f9bf866989171e8d074c6c85eccfae19b4d16f12b89e4d171184eba2cf62c9307631a418a93d224bb3ea7","ssdeep":"192:BJNlFNK61sDvU6M8qKnkLehPzIviqMB++0DX0au1:HHX/2RnkLehP0IB++0DX0au1","tlshash":"2702d821eae11526404350c4b9b69b1f7bb4e607c70a487c36ed26b95fcedf6cd1b088","dom_hash":"domhash269b116a233a24502bc646606323d708","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"sdadsa-qqqasdsadas.lol/","fqdn":"sdadsa-qqqasdsadas.lol","domain":"sdadsa-qqqasdsadas.lol","tld":"lol"},"ip":{"addr":"104.21.47.220","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-28T21:11:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"sdadsa-qqqasdsadas.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"sdadsa-qqqasdsadas.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"greatestanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"sdadsa-qqqasdsadas.lol","ip":{"addr":"172.67.172.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-19","domain_rank":0,"first_seen":"2026-02-21T20:23:13.350486Z","last_seen":"2026-02-21T20:23:13.350486Z","alert_count":16,"request_count":8,"received_data":2123108,"sent_data":4091,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"greatestanalytics.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-01","domain_rank":0,"first_seen":"2026-02-06T22:26:03.850781Z","last_seen":"2026-02-21T20:23:13.899964Z","alert_count":3,"request_count":3,"received_data":139049,"sent_data":1753,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sdadsa-qqqasdsadas.lol/","fqdn":"sdadsa-qqqasdsadas.lol","domain":"sdadsa-qqqasdsadas.lol","tld":"lol"},"ip":{"addr":"172.67.172.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"beaa8220981503601917873a32143cca","sha1":"0291a34a4bbc36661a2f8cd0421c94c2ba8344b3","sha256":"465dec161568351564f55445fbf7ed554893f16d6d67dac99eca37ca60ff6fd4","sha512":"ea6323fd3ddbd9682fefa4ff0ae12f8f462711d5723a3e742c378d71b5bf5ff4861de6baa6b5525534186543d4ce25f76c378b78d10310227a6c9336a86a7c7d","ssdeep":"","tlshash":"48c0c04885a04cb9013c14ae30790f8730c4391e8091f1dfcbfc8c8dd84cf890d08404","size":186,"data":"","first_seen":"2026-02-06T22:26:07.373298Z","last_seen":"2026-02-21T21:11:03.640646Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdadsa-qqqasdsadas.lol/","fqdn":"sdadsa-qqqasdsadas.lol","domain":"sdadsa-qqqasdsadas.lol","tld":"lol"},"ip":{"addr":"172.67.172.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e87e9830b41d6fc0cc6f49574d6599d","sha1":"7a6b8c0f83b9eeec74cb80207342b8df1ef16d38","sha256":"62379ad24d3fb00988a5e74da914a7187834a622a37e41ce8dd439a2543c159d","sha512":"af7ae6ef88a446084e053205c929e0fc9f44864ad9e1f447c00225f7328a1fa36a4cc70ee883f4c57b94b2f0312467078c817fd3ea3996f912ea2d805c7ad47f","ssdeep":"","tlshash":"f0f0c01118ef1dfd2237533e2d7e891d73eb2c1550a0c0406d50d4149e7158186442c8","size":512,"data":"","first_seen":"2026-02-06T22:26:07.375435Z","last_seen":"2026-02-21T21:11:03.641861Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greatestanalytics.com/matomo.js","fqdn":"greatestanalytics.com","domain":"greatestanalytics.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"427a85603a9b60ebbf785f240d3d5833","sha1":"a31cbe7654d5ca8aa105b8334760daee62f3d7c4","sha256":"3f5cf37a5090c0085a0e1fee7b766c1961f20651d1ce860845d2a891f239308c","sha512":"25a2a620860f759e9f62ad769e2548866131a8da19deee5fde7abf74ed97f062ec56e979da0e4753aa6ebf35b551a8f1a21a95abf635f38ffdf68800c2cfe1af","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmbMNfwS9h2BLy1z71B8I6fJIKIQaF95h/vw9cWu:AT+Z2fuqXYy1PGJ9dq5lvw9cW/e2eHy4","tlshash":"26d3099a77c2763aabc760b9503f1106b27aacab6008c4b4f535c4e6397894d543bf7c","size":136802,"data":"","first_seen":"2025-10-11T19:50:46.20167Z","last_seen":"2026-07-24T16:30:27.288665Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greatestanalytics.com/plugins/HeatmapSessionRecording/configs.php?idsite=1\u0026trackerid=rpGbPa\u0026url=https%3A%2F%2Fsdadsa-qqqasdsadas.lol%2F","fqdn":"greatestanalytics.com","domain":"greatestanalytics.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69e1399efd415882914d3a21dddbed66","sha1":"af75e17ec66c02a35cb77c0a90727d4d2d1a392d","sha256":"a3057eed50127e3efd1e7e1fc0659b0c4ef842c056839af0a7e3d3f8bd607178","sha512":"342a2bddc4dee2c86a821a833ecb2a8c07abbfb4b112c592b5fb061b024868b793d74ce22547fa6e9a517ab2476351f84acd7b5af7150a8423e36e0ddfdda44f","ssdeep":"","tlshash":"64d02e0813283e35c2a280185b36ba820c7c032929e82c22bfe8196c43cc0848a036eb","size":271,"data":"","first_seen":"2026-02-21T21:11:03.626965Z","last_seen":"2026-02-21T21:11:03.626965Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdadsa-qqqasdsadas.lol/secureproxy?s=%2Fipfs%2Fc8h6WrhUBmRX2mgBShT7HA5bbd0759ab7e032621f80b21b255a33a%3Ft%3D1771708239909","fqdn":"sdadsa-qqqasdsadas.lol","domain":"sdadsa-qqqasdsadas.lol","tld":"lol"},"ip":{"addr":"172.67.172.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88e904a053411cf3032df6897fa4a165","sha1":"cc6c204a322cf2d414c7fea29e68908a6df28ca9","sha256":"bb0a48de3df746a0f4ec74d9c568fd3605c0a50545b8314608b5004795e7067d","sha512":"83e70566f891eb3d98d4b2d407da8c3064c129a17957be730001225d59d7b1b9f7d65b942bec89a7e057e0c9b86896f945eb129247a33c3a00c9319cfbf13e22","ssdeep":"6144:3h5gDbACl2/EM1CjCjRHlIy6VKcRmWLO2m3fnDRumuSYlhv1wf2Rti:/sbACl4N1CjCjRHlIyQRhOLfD3J","tlshash":"06d4bcc0875915bf42982aae19b35b7fdfa80d58074bcc5073c31cd163a570a9be6be8","size":599266,"data":"","first_seen":"2026-02-21T21:11:03.633821Z","last_seen":"2026-02-21T21:11:03.633821Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sdadsa-qqqasdsadas.lol/scroll-video.mp4.html","fqdn":"sdadsa-qqqasdsadas.lol","domain":"sdadsa-qqqasdsadas.lol","tld":"lol"},"ip":{"addr":"172.67.172.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://sdadsa-qqqasdsadas.lol/","date":"2026-02-21T21:10:40.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdadsa-qqqasdsadas.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 16:34:20 GMT","end":"Wed, 20 May 2026 16:34:19 GMT"},"fingerprint":{"sha1":"D9:C7:94:35:5A:26:79:11:63:CA:E5:EB:18:21:6F:B2:37:51:1D:B8","sha256":"BC:5E:68:71:D7:3E:C7:FD:A9:3F:02:19:0E:54:78:5B:6E:A1:5E:C1:A9:5C:DB:09:17:67:45:AD:88:75:2D:D2"}}},"request":{"raw":"GET /scroll-video.mp4.html HTTP/1.1\r\nHost: sdadsa-qqqasdsadas.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdadsa-qqqasdsadas.lol/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:10:40 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nx-cdn-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ClhyeikOlRhjUwDn0FfX28IHM7ToIUR%2BjJsyDnf%2Bux8u8dUznF4z8xMGmO7FzjYe7Aey7FfiJD7FmpryAYE%2BZmYtzIpqH7FQwP%2F0agtOZmVDJrzjlqg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d193b547ef357e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":564,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"54d14e2aba479693f9fd361a56d5f525","sha1":"2e52709ffe46120e45b90fb907bb2d09e083b448","sha256":"ed6f6f2144998175c846a99d2a0faab5bf7b6ace318f0fe2dc4bfeaf4700c1d8","sha512":"460c379c9b4c4b5b89f302cec4edaa5707578fc336ec70c8ad992d8341a9f3e27b1764b8b9f170715723afc7f3e7114faa4c09ed4e3db2a77c90ba5ccaa05498","ssdeep":"","tlshash":"10f0cd9f1f12387f2e238170f0c35068cf680a56fb9921e28748001f3aca04549f6fad","first_seen":"2024-01-26T07:56:20Z","last_seen":"2026-07-26T14:20:36.980417Z","times_seen":775,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"sdadsa-qqqasdsadas.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"sdadsa-qqqasdsadas.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greatestanalytics.com/matomo.php?action_name=%24PENGUIN\u0026idsite=1\u0026rec=1\u0026r=454883\u0026h=21\u0026m=10\u0026s=40\u0026url=https%3A%2F%2Fsdadsa-qqqasdsadas.lol%2F\u0026_id=ba737dd9072918a2\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=N2ZWjs\u0026pf_net=82\u0026pf_srv=170\u0026pf_tfr=0\u0026pf_dm1=241\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"greatestanalytics.com","domain":"greatestanalytics.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://sdadsa-qqqasdsadas.lol/","date":"2026-02-21T21:10:40.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greatestanalytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 22:37:14 GMT","end":"Sat, 02 May 2026 23:35:56 GMT"},"fingerprint":{"sha1":"41:15:AD:FC:65:36:AE:C2:DF:6D:7A:38:7A:58:60:5A:50:9A:A3:AF","sha256":"CF:0A:DF:40:18:97:0C:E5:72:B1:1C:8D:CC:D5:14:3D:BF:4D:D7:80:DC:FC:13:33:B3:CD:47:D5:81:A0:D9:FA"}}},"request":{"raw":"POST /matomo.php?action_name=%24PENGUIN\u0026idsite=1\u0026rec=1\u0026r=454883\u0026h=21\u0026m=10\u0026s=40\u0026url=https%3A%2F%2Fsdadsa-qqqasdsadas.lol%2F\u0026_id=ba737dd9072918a2\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=N2ZWjs\u0026pf_net=82\u0026pf_srv=170\u0026pf_tfr=0\u0026pf_dm1=241\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: greatestanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://sdadsa-qqqasdsadas.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdadsa-qqqasdsadas.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sat, 21 Feb 2026 21:10:40 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: https://sdadsa-qqqasdsadas.lol\r\naccess-control-allow-credentials: true\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNKXiT8X2kW3KcJB8TJQYtd1MUlpp7zKmQ5eTj9UhFyqnUQ%2B%2FY%2FqgSaRNlmclc1waesk1CGT4IMHDgPfLdOStqU%2B%2BDHOXw6aE126AhVBNLvhEYcADQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d193b558e3c1f50-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"greatestanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greatestanalytics.com/plugins/HeatmapSessionRecording/configs.php?idsite=1\u0026trackerid=rpGbPa\u0026url=https%3A%2F%2Fsdadsa-qqqasdsadas.lol%2F","fqdn":"greatestanalytics.com","domain":"greatestanalytics.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sdadsa-qqqasdsadas.lol/","date":"2026-02-21T21:10:40.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greatestanalytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 22:37:14 GMT","end":"Sat, 02 May 2026 23:35:56 GMT"},"fingerprint":{"sha1":"41:15:AD:FC:65:36:AE:C2:DF:6D:7A:38:7A:58:60:5A:50:9A:A3:AF","sha256":"CF:0A:DF:40:18:97:0C:E5:72:B1:1C:8D:CC:D5:14:3D:BF:4D:D7:80:DC:FC:13:33:B3:CD:47:D5:81:A0:D9:FA"}}},"request":{"raw":"GET /plugins/HeatmapSessionRecording/configs.php?idsite=1\u0026trackerid=rpGbPa\u0026url=https%3A%2F%2Fsdadsa-qqqasdsadas.lol%2F HTTP/1.1\r\nHost: greatestanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdadsa-qqqasdsadas.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 21:10:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 182\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TnYcUhK7A3MWkU%2Bs2UjIeyFJY7G7UTbqNALbiwF8c1BKLADQCTkHPQ3HnXBw1XCi764AotZXOWUs%2BAC7xKoFa19TYLWRB3G9CdQCvcanJu0uSt04%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d193b55beb31f50-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"69e1399efd415882914d3a21dddbed66","sha1":"af75e17ec66c02a35cb77c0a90727d4d2d1a392d","sha256":"a3057eed50127e3efd1e7e1fc0659b0c4ef842c056839af0a7e3d3f8bd607178","sha512":"342a2bddc4dee2c86a821a833ecb2a8c07abbfb4b112c592b5fb061b024868b793d74ce22547fa6e9a517ab2476351f84acd7b5af7150a8423e36e0ddfdda44f","ssdeep":"","tlshash":"64d02e0813283e35c2a280185b36ba820c7c032929e82c22bfe8196c43cc0848a036eb","first_seen":"2026-02-21T21:11:03.626965Z","last_seen":"2026-02-21T21:11:03.626965Z","times_seen":1,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"greatestanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdadsa-qqqasdsadas.lol/secureproxy?s=%2Fjmpd%2F","fqdn":"sdadsa-qqqasdsadas.lol","domain":"sdadsa-qqqasdsadas.lol","tld":"lol"},"ip":{"addr":"172.67.172.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sdadsa-qqqasdsadas.lol/","date":"2026-02-21T21:10:41.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdadsa-qqqasdsadas.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 16:34:20 GMT","end":"Wed, 20 May 2026 16:34:19 GMT"},"fingerprint":{"sha1":"D9:C7:94:35:5A:26:79:11:63:CA:E5:EB:18:21:6F:B2:37:51:1D:B8","sha256":"BC:5E:68:71:D7:3E:C7:FD:A9:3F:02:19:0E:54:78:5B:6E:A1:5E:C1:A9:5C:DB:09:17:67:45:AD:88:75:2D:D2"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: sdadsa-qqqasdsadas.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sdadsa-qqqasdsadas.lol/\r\ncontent-type: application/json\r\nContent-Length: 1390\r\nOrigin: https://sdadsa-qqqasdsadas.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _pk_id.1.11f9=ba737dd9072918a2.1771708240.; _pk_ses.1.11f9=1; _pk_hsr.1.11f9=1.0_4.0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1390,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB4QLIAhIACQDRAgQDIwC2AhAAAgEAGgMAAO8nhn2XtsKCAYqsri43gYyR6pJkMW0CAABJ393TzPOOjiCcsUhUUH7LiaGrKt06RJgmXnuZEiycVAnju9rQi6olC2FWTX4I0Zx1Wdos1YmKTyKhhueAQ8-yyOI-gHpXkCPvi1W9D-eljfuEBXjyZHotpy9q3Zax1FwBDuxvP0gHKPHyvsj9wOKONWbjIxePenNo6A2C5RBB05jqx-PxkdpkQYqYqqHDVICAoUZuRLVo3zQOQWJGwD1f5gB3R3n4CT5vBqH1UNIPeWWjybOh2mW-m53w1vIJS4P8Nud5HxG3-iL0ofj3VkoJtTiDUtyCnLhNbOcmioKjMczI33A_NsxGxbYlsUIJD1QMriCgG3G4u3EUVbWa-93QFb6yQgtAkqK_GktOyooww2TkQIuKm-XgTwYMgHfpmdEIqzCI3BC1OB7FQH91cLR7Thz1DoMcycFDxh7xvqICMsBZ0PvIoF9JmSIJEdIpWlB07w1CShtK2PZRc2ob7_W4QrttmtVfGFSCSKYRSi55QdlbFNAVYONApmVuHhc1fetpg1wxqv8OjvL4kA5TT7-8gbu6ICwHXXi79fH9tKH8aG6PDnCZ_KcOlMha6odWCZ1s9Gvb-snxJtiM0AZHs5S3lCxTOb_fyosJA-UyJ7ucTpY_oIHCqg6OeMvUIKUkUQWiYMNJZoP1jz08tM2tVqn0xUhZ5QVwWsm2qhL5j-8bmfOOqjRsCP4fNkUZLYgmT_O0Og5wp7h45smrAB6nbHSPZAvXzldnQTSAsO6-CnqCzwYOuMIsQt7bx7Oylibfmr2kZ29MoGARPK9bwG53CgbK9I30xZlh_SJJr7Z0o1o8WlffZZc-0gXGS7iemPUICJZ4T37MiwLnO0oCNLFRmKNmnvxkF2-qnRVFvWyxbjcNh8GWZZlrdkLyy4GVdvROhMynOR5tZtwr5wvAGmOuBKAOGI0Dh0ENMNUpl3TBN08m_07CJTD1ZWdH1ILUMnUPIyGW62bLoWNF-QVQvRVZT94WONEVBLhPWeTyiTyGhwCFd4Xrfq90XhJt6WYNM5sO5FNRZ1965_804AzmiIOPUpOZXO75u1huipbk-DNrszosNFuXuAwIo6ZuwwailRRjk7T2EA\",\"challenge\":\"eyJpZCI6Il84NEctVmpEemFoWnl1Y29Ia1d5YUEiLCJub25jZSI6ODg3LCJoYXNoIjoiMDA4ZTRmMjQxZWE2MTJiMWE0ZTY0MjhhNTVkOTAxOGU5Mzk4Yzg4OGE0M2I3MGYyNGZhYTFkZTI0ZWUyOTM2YiJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:10:42 GMT\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9998\r\nx-ratelimit-reset: 1771708301934\r\ncdn-proxyver: 1.46\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 02/21/2026 21:10:42\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: e55b77ecc842167e4438eafe82fe582e\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F56oFcnu5Q%2FDQ59PDRLOotIBI3zfJgcqenDni9yq4WhjG2M2HUZTWWyYegLv3ml0y2MQEzJ4uE3xtTlL%2BUNFLaoKW%2BrRwN8%2FEsKMpYy4mexDfnQ3JUM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d193b5fb95857e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":626,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":626,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"sdadsa-qqqasdsadas.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"sdadsa-qqqasdsadas.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdadsa-qqqasdsadas.lol/","fqdn":"sdadsa-qqqasdsadas.lol","domain":"sdadsa-qqqasdsadas.lol","tld":"lol"},"ip":{"addr":"172.67.172.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-21T21:10:39.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdadsa-qqqasdsadas.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 16:34:20 GMT","end":"Wed, 20 May 2026 16:34:19 GMT"},"fingerprint":{"sha1":"D9:C7:94:35:5A:26:79:11:63:CA:E5:EB:18:21:6F:B2:37:51:1D:B8","sha256":"BC:5E:68:71:D7:3E:C7:FD:A9:3F:02:19:0E:54:78:5B:6E:A1:5E:C1:A9:5C:DB:09:17:67:45:AD:88:75:2D:D2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sdadsa-qqqasdsadas.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 21:10:39 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-store\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u9e5kD3qiz49yAKxAmO4IqktNaZe8Hu%2F0mg7c9iM8ftc2lmnbaVlXheUpP9Xza%2F9FFbOJ0QJ4mKI9LRq%2FJlcqTMTuxRaMRucGyppKuyFggHbDyIptlg%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d193b50ce7f4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8183,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (601), with CRLF line terminators","md5":"a0590fbd70d7db3490486b33b3fbae37","sha1":"cd3184e71a0d44a99cdf5eba8ba4df0d958e47a9","sha256":"439f553ab3e958583a2ef747caee65fabcd71e62096456cb310be9cd6952c4ba","sha512":"d3525be42bb775fafff467e0847dff5300ff62ba0cdb24256dbd62ff54434fa072737f1c9e27adae75bffdd06d6d278a68aab7e408e93503921971e9a76151b2","ssdeep":"192:EUEnNEH963zGRnkelRy7qI8Bdr7BBr46lZuUJ:XEQnkejy77g7BBr46lZuUJ","tlshash":"6ff18320a6c1252641739184f9b55b9efbb59207c30a487c36ed27bb6ffedb1c91b084","first_seen":"2026-02-06T22:26:07.356905Z","last_seen":"2026-02-21T21:11:03.629867Z","times_seen":3,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":61,"dns":35,"connect":8,"send":0,"wait":170,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"sdadsa-qqqasdsadas.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"sdadsa-qqqasdsadas.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdadsa-qqqasdsadas.lol/style.css","fqdn":"sdadsa-qqqasdsadas.lol","domain":"sdadsa-qqqasdsadas.lol","tld":"lol"},"ip":{"addr":"172.67.172.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sdadsa-qqqasdsadas.lol/","date":"2026-02-21T21:10:39.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdadsa-qqqasdsadas.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 16:34:20 GMT","end":"Wed, 20 May 2026 16:34:19 GMT"},"fingerprint":{"sha1":"D9:C7:94:35:5A:26:79:11:63:CA:E5:EB:18:21:6F:B2:37:51:1D:B8","sha256":"BC:5E:68:71:D7:3E:C7:FD:A9:3F:02:19:0E:54:78:5B:6E:A1:5E:C1:A9:5C:DB:09:17:67:45:AD:88:75:2D:D2"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: sdadsa-qqqasdsadas.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdadsa-qqqasdsadas.lol/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:10:39 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Feb 2026 17:37:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 28 Feb 2026 16:29:58 GMT\r\ncache-control: public, max-age=604800, immutable\r\nx-cdn-cache: HIT\r\ncontent-encoding: br\r\nage: 2874\r\ncf-cache-status: HIT\r\netag: W/\"69974a6d-2653\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2Bd5hMXiULFgyLW%2BlH2TLFTpCAwt%2F5dfBAfgffWqP1IB0mrZoKdm5K3LWSmBFE4uKNCPaoNJeWZ3NsR%2BwUo8rdicUP73uRKzB7j3YC7w9yx9I2vpnzw%3D\"}]}\r\ncf-ray: 9d193b532ec857e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9811,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"1f7cee6a24172d181b0c4ca73c3d85ba","sha1":"969a2a4410db7325d701181b9a49ef954f82ea9e","sha256":"017528e617e86c8e351ea710338944d32c111961c00f2ada4d71d9e95c545f2b","sha512":"a71433cc771d431b19e8775a7945af7f04424a7372151177bc011ad33559f5d0f69546e155d2be425b4be78610c176ea402b817c379e32fc76527e0e55d69067","ssdeep":"192:kleSkLVPS2jtFQwxaVm0K2uY8t6nTXzuZ/PLbAEt/H6r7wI/+RgW4:DltFQBVm7U8CfC74","tlshash":"cd12128726930404b9aba8bdafea5745a2599007d30fcc6d3bcc654c9f451f8e9b278c","first_seen":"2026-02-06T22:26:07.3613Z","last_seen":"2026-02-21T21:11:03.631446Z","times_seen":5,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"sdadsa-qqqasdsadas.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"sdadsa-qqqasdsadas.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdadsa-qqqasdsadas.lol/screenshot.png","fqdn":"sdadsa-qqqasdsadas.lol","domain":"sdadsa-qqqasdsadas.lol","tld":"lol"},"ip":{"addr":"172.67.172.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sdadsa-qqqasdsadas.lol/","date":"2026-02-21T21:10:39.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdadsa-qqqasdsadas.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 16:34:20 GMT","end":"Wed, 20 May 2026 16:34:19 GMT"},"fingerprint":{"sha1":"D9:C7:94:35:5A:26:79:11:63:CA:E5:EB:18:21:6F:B2:37:51:1D:B8","sha256":"BC:5E:68:71:D7:3E:C7:FD:A9:3F:02:19:0E:54:78:5B:6E:A1:5E:C1:A9:5C:DB:09:17:67:45:AD:88:75:2D:D2"}}},"request":{"raw":"GET /screenshot.png HTTP/1.1\r\nHost: sdadsa-qqqasdsadas.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdadsa-qqqasdsadas.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 1495228\r\nlast-modified: Thu, 19 Feb 2026 17:37:49 GMT\r\netag: \"69974a6d-16d0bc\"\r\nexpires: Sat, 28 Feb 2026 16:29:58 GMT\r\ncache-control: public, max-age=604800, immutable\r\nx-cdn-cache: HIT\r\naccept-ranges: bytes\r\nage: 2874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HWBpSDCorZYn5P1SoBRr7tsb8cgOE%2FjLSVvwQXbLXnIf4%2FYP6Wmm8%2BHH51rFmfn8UWsF0jjrtW6MQaimFgXjjae40dpY3j8xi4erPJkkVb6kByJMK%2Fs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d193b532ec957e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1495228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1574 x 1574, 8-bit/color RGBA, non-interlaced","md5":"22eb6f7e1b9225273296f3b9727fbe8c","sha1":"812ae951cf7824ffe723a852aa4e382cc04a1e60","sha256":"ce8205ffb7e42e5a4767a12b0b3867c27e451dea33743d99fc570c8d376453c9","sha512":"25e4e284fd2c5934c530541772769da24d0b7d0ead91f552022e8c09c14da8a922498aa1b4b59ab0ffbd9078aead90999bb00804558526e526066afe43626ede","ssdeep":"24576:tHAcHP4yuEPrOsluRyDhRpGiGfp3A0hi+Bzx4PzkrZ:tHAcvIEPlDhRpGiG205Bzx4I","tlshash":"4a253360df8328cc4d8f77152f57feea3fe0d889415a9613a9d805edb9e4cb4a09c918","first_seen":"2026-02-06T22:26:07.366098Z","last_seen":"2026-05-09T00:05:22.739486Z","times_seen":6,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"sdadsa-qqqasdsadas.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"sdadsa-qqqasdsadas.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdadsa-qqqasdsadas.lol/secureproxy?s=%2Fipfs%2Fc8h6WrhUBmRX2mgBShT7HA5bbd0759ab7e032621f80b21b255a33a%3Ft%3D1771708239909","fqdn":"sdadsa-qqqasdsadas.lol","domain":"sdadsa-qqqasdsadas.lol","tld":"lol"},"ip":{"addr":"172.67.172.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sdadsa-qqqasdsadas.lol/","date":"2026-02-21T21:10:40.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdadsa-qqqasdsadas.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 16:34:20 GMT","end":"Wed, 20 May 2026 16:34:19 GMT"},"fingerprint":{"sha1":"D9:C7:94:35:5A:26:79:11:63:CA:E5:EB:18:21:6F:B2:37:51:1D:B8","sha256":"BC:5E:68:71:D7:3E:C7:FD:A9:3F:02:19:0E:54:78:5B:6E:A1:5E:C1:A9:5C:DB:09:17:67:45:AD:88:75:2D:D2"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2Fc8h6WrhUBmRX2mgBShT7HA5bbd0759ab7e032621f80b21b255a33a%3Ft%3D1771708239909 HTTP/1.1\r\nHost: sdadsa-qqqasdsadas.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdadsa-qqqasdsadas.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:10:40 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"924e2-zGwgSjIs8tQUx/6inmiQim3yjKk\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=zP93x9nv7eZNIo36owZy6Q.js\r\ncdn-proxyver: 1.46\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/21/2026 21:10:40\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 74bab0be019ae7cbf061ce31cf6ea3c6\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BwxvmY1Ec03jHhtgNYuP32nVr70GRJVU6e7Fp0PAVqr6K2sfcMARKlgH9%2F3aMOSqqOgXOytY52oDj5Bt9ZHRjzY%2Bk2d%2BZ1buP%2FVwc62RUjhppBjh9Ic%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d193b53fee257e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":599266,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"88e904a053411cf3032df6897fa4a165","sha1":"cc6c204a322cf2d414c7fea29e68908a6df28ca9","sha256":"bb0a48de3df746a0f4ec74d9c568fd3605c0a50545b8314608b5004795e7067d","sha512":"83e70566f891eb3d98d4b2d407da8c3064c129a17957be730001225d59d7b1b9f7d65b942bec89a7e057e0c9b86896f945eb129247a33c3a00c9319cfbf13e22","ssdeep":"6144:3h5gDbACl2/EM1CjCjRHlIy6VKcRmWLO2m3fnDRumuSYlhv1wf2Rti:/sbACl4N1CjCjRHlIyQRhOLfD3J","tlshash":"06d4bcc0875915bf42982aae19b35b7fdfa80d58074bcc5073c31cd163a570a9be6be8","first_seen":"2026-02-21T21:11:03.633821Z","last_seen":"2026-02-21T21:11:03.633821Z","times_seen":1,"resource_available":true,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":681,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"sdadsa-qqqasdsadas.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"sdadsa-qqqasdsadas.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdadsa-qqqasdsadas.lol/cebaf61afe95e5a46a74821707e374aef9845da8.svg","fqdn":"sdadsa-qqqasdsadas.lol","domain":"sdadsa-qqqasdsadas.lol","tld":"lol"},"ip":{"addr":"172.67.172.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sdadsa-qqqasdsadas.lol/","date":"2026-02-21T21:10:40.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdadsa-qqqasdsadas.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 16:34:20 GMT","end":"Wed, 20 May 2026 16:34:19 GMT"},"fingerprint":{"sha1":"D9:C7:94:35:5A:26:79:11:63:CA:E5:EB:18:21:6F:B2:37:51:1D:B8","sha256":"BC:5E:68:71:D7:3E:C7:FD:A9:3F:02:19:0E:54:78:5B:6E:A1:5E:C1:A9:5C:DB:09:17:67:45:AD:88:75:2D:D2"}}},"request":{"raw":"GET /cebaf61afe95e5a46a74821707e374aef9845da8.svg HTTP/1.1\r\nHost: sdadsa-qqqasdsadas.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdadsa-qqqasdsadas.lol/\r\nCookie: _pk_id.1.11f9=ba737dd9072918a2.1771708240.; _pk_ses.1.11f9=1; _pk_hsr.1.11f9=1.0_4.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:10:40 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 19 Feb 2026 17:37:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 28 Feb 2026 16:30:44 GMT\r\ncache-control: public, max-age=604800, immutable\r\nx-cdn-cache: HIT\r\ncontent-encoding: br\r\nage: 2874\r\ncf-cache-status: HIT\r\netag: W/\"69974a6d-72\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7JCYRP5fn0yzi7AaL%2BfIUnSiT6PVLJ5BfLhnJXsPdEf6TsXWNaULPa531lexAWDvdqE%2FaOK5JsX%2B6wOS%2FEkgQuwgPG0Bo4hSO2%2F%2FtsrgGZG6XMeiANE%3D\"}]}\r\ncf-ray: 9d193b570f6b57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"471beff33c29948f1d2df84ff1be9f72","sha1":"cebaf61afe95e5a46a74821707e374aef9845da8","sha256":"f62cf7d1a3af8789993c4407833d9c8d0641545a1edcf16a3ef3054c282131de","sha512":"518347f3607568fbef83f660056ac5902837fc065e7cb1342708c0eb2e46330794d61bf2870aca36c70d8f1ac323ae61dd7626d7d4ca0e7637ed24e0463887af","ssdeep":"","tlshash":"1eb0927a83e96e50a69cc91128647a21aaad80e64498ccbaa88244b2a156d52a401169","first_seen":"2026-02-06T22:26:07.371173Z","last_seen":"2026-02-21T21:11:03.636294Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"sdadsa-qqqasdsadas.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"sdadsa-qqqasdsadas.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdadsa-qqqasdsadas.lol/pump-logomark.svg","fqdn":"sdadsa-qqqasdsadas.lol","domain":"sdadsa-qqqasdsadas.lol","tld":"lol"},"ip":{"addr":"172.67.172.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sdadsa-qqqasdsadas.lol/","date":"2026-02-21T21:10:39.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdadsa-qqqasdsadas.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 16:34:20 GMT","end":"Wed, 20 May 2026 16:34:19 GMT"},"fingerprint":{"sha1":"D9:C7:94:35:5A:26:79:11:63:CA:E5:EB:18:21:6F:B2:37:51:1D:B8","sha256":"BC:5E:68:71:D7:3E:C7:FD:A9:3F:02:19:0E:54:78:5B:6E:A1:5E:C1:A9:5C:DB:09:17:67:45:AD:88:75:2D:D2"}}},"request":{"raw":"GET /pump-logomark.svg HTTP/1.1\r\nHost: sdadsa-qqqasdsadas.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdadsa-qqqasdsadas.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:10:39 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Feb 2026 17:37:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 26 Feb 2026 17:58:43 GMT\r\ncache-control: public, max-age=604800, immutable\r\nx-cdn-cache: HIT\r\ncontent-encoding: br\r\nage: 181534\r\ncf-cache-status: HIT\r\netag: W/\"69974a6d-a5d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLgHDMvONF3OXYyfKyEwUnSO6FQ8s9MoFXkHnZXR0dKA%2FK7spmVFxdOvK95FnQwYeDSNha9RYyTkNdh0S57CcUEARleH1tdRoWeyWCg2OVYDK4WhHQ8%3D\"}]}\r\ncf-ray: 9d193b532eca57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2653,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ac045d44726d3ecd7d70cc10fd98c72","sha1":"d3e2dbb1530f6a00a41c9467e977fb61048ed08d","sha256":"2c72b8e06bbd7be8823c2cce4bbe652ba7a36e35074b8a1b27fd668304816379","sha512":"488d3da62f6ba30a36f8bb106262c3342583a719402680e34ce6d99ba26db1aea5d14496d7427aa39544527a3d5f63a0030d6e32d48e4366e07aacd5db5d12a8","ssdeep":"","tlshash":"395171ff7b5448e5de86c2f8eb2a2adb782a24d97120464193d42f29780176c4d8ac93","first_seen":"2025-11-15T00:25:53.758655Z","last_seen":"2026-07-21T02:09:16.137781Z","times_seen":409,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"sdadsa-qqqasdsadas.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"sdadsa-qqqasdsadas.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greatestanalytics.com/matomo.js","fqdn":"greatestanalytics.com","domain":"greatestanalytics.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sdadsa-qqqasdsadas.lol/","date":"2026-02-21T21:10:40.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greatestanalytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 22:37:14 GMT","end":"Sat, 02 May 2026 23:35:56 GMT"},"fingerprint":{"sha1":"41:15:AD:FC:65:36:AE:C2:DF:6D:7A:38:7A:58:60:5A:50:9A:A3:AF","sha256":"CF:0A:DF:40:18:97:0C:E5:72:B1:1C:8D:CC:D5:14:3D:BF:4D:D7:80:DC:FC:13:33:B3:CD:47:D5:81:A0:D9:FA"}}},"request":{"raw":"GET /matomo.js HTTP/1.1\r\nHost: greatestanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdadsa-qqqasdsadas.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 21:10:40 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 41496\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Feb 2026 22:24:54 GMT\r\netag: \"21662-649decad6b40b-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KFrdo%2BfPu%2BXgW7ziI9mWznNRImK1wtt9WCjpseMx%2BORg62zZHaNiOpUcbfyYQLyile1XAw2ja4TK0aqnkwQBeRcxZdarPuzKgma0BXLVssAHWnyWog%3D%3D\"}]}\r\nage: 2874\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9d193b54d859f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136802,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2923)","md5":"427a85603a9b60ebbf785f240d3d5833","sha1":"a31cbe7654d5ca8aa105b8334760daee62f3d7c4","sha256":"3f5cf37a5090c0085a0e1fee7b766c1961f20651d1ce860845d2a891f239308c","sha512":"25a2a620860f759e9f62ad769e2548866131a8da19deee5fde7abf74ed97f062ec56e979da0e4753aa6ebf35b551a8f1a21a95abf635f38ffdf68800c2cfe1af","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmbMNfwS9h2BLy1z71B8I6fJIKIQaF95h/vw9cWu:AT+Z2fuqXYy1PGJ9dq5lvw9cW/e2eHy4","tlshash":"26d3099a77c2763aabc760b9503f1106b27aacab6008c4b4f535c4e6397894d543bf7c","first_seen":"2025-10-11T19:50:46.20167Z","last_seen":"2026-07-24T16:30:27.288665Z","times_seen":70,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":69,"dns":42,"connect":8,"send":0,"wait":19,"receive":2,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"greatestanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}