{"report_id":"96572f3b-e2e3-486f-897c-da58f9f92979","version":0,"status":"done","tags":[],"date":"2026-07-08T11:59:20Z","url":{"schema":"https","addr":"distribution-flarenetwork.xyz","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"title":"Flare: The blockchain for data","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T08:51:51.056667Z","times_seen":17869035,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T11:59:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"distribution-flarenetwork.xyz","ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-06","domain_rank":0,"first_seen":"2026-07-08T11:59:22.988162Z","last_seen":"2026-07-08T11:59:22.988162Z","alert_count":28,"request_count":14,"received_data":5033482,"sent_data":6958,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5b767c078c6813816231552aca1d562","sha1":"34f99579b527c24b3a5af82abb42079a0d3e1a51","sha256":"c17d50bae5a02a35e0ae5d0005c694495952f093629bb5193c668070161b0f7a","sha512":"7b4aed1d33c4891894a556505047a8f7afd72efc1c30c064b5a428fac50a5475e895f3937869de6d047128910d762069084c41d12fbacecffd43cd98e84b2e48","ssdeep":"","tlshash":"70c0125d7010696614ce687d4ccf088ebe368812a20809c999dcd4547bb1e6c42e484c","size":185,"data":"","first_seen":"2024-04-08T19:47:46Z","last_seen":"2026-08-04T03:59:23.641877Z","times_seen":721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"28463ffd241a760c6b6a66378d3d242a","sha1":"bdfac461a3e7d5b78df3963cb057a59ada10146e","sha256":"6c6184f223a4cfcd6e8deaaa2d905fdcea094201022cb77b91ae847387f81d22","sha512":"10a3f429bf8407619078329d0aee41343333c1dc82af5eff1c3145c98ebb79de639100f61f85383ec248423a606ed16edfede03f7cd77318e12ac431d29d671d","ssdeep":"","tlshash":"ab41bf2baba7337958ab25b76fcba7943d2204430449c5107facca818f60e7159676e8","size":1962,"data":"","first_seen":"2026-07-08T11:27:46.071402Z","last_seen":"2026-07-08T11:59:26.983535Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-08-07T09:24:33.956144Z","times_seen":1397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-13T08:30:02.722596Z","times_seen":91886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/light-bridge-v1.7.min.js","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0871352694c403c286ee0726508aa59b","sha1":"a2abcee7af2128b4fd01e693a3b89c7d13b2fa73","sha256":"0a900599a144a474baa1fcadeea193d91519c9337ae7dfb7a568a6af5e499865","sha512":"bab61c27c0556f88592e01cba8326de328b83c69f71201c4057c190e912d4c7509ffa61c41b5988c4be59148627fd1da41752f35ab3134309f4cff19420fd43d","ssdeep":"49152:bymgbVkU5l/ri8V8UNFJznn8bGOrH0uowY954ZJ1mvuJ7FFzyA4hT:ygY","tlshash":"b7e56413a2d1389601d75eb1762750daec2d8bafa08c9bfaa94df834fce1054e5dc670","size":3148313,"data":"","first_seen":"2026-07-08T11:59:26.993392Z","last_seen":"2026-07-08T11:59:26.993392Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/omega-module-v2.7.min.js","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://distribution-flarenetwork.xyz/","date":"2026-07-08T11:58:37.300Z","timestamp":1783511917300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 22:42:56 GMT","end":"Sun, 04 Oct 2026 23:41:28 GMT"},"fingerprint":{"sha1":"2E:2A:62:F5:8E:23:5C:4A:BF:36:8D:11:AC:2D:F3:47:04:56:A9:EE","sha256":"A1:25:89:EB:6B:C8:9B:18:12:72:E4:A0:37:5E:2D:6A:19:D0:E8:F0:B5:F4:21:5E:B0:AB:19:37:20:76:B3:07"}}},"request":{"raw":"GET /omega-module-v2.7.min.js HTTP/1.1\r\nHost: distribution-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://distribution-flarenetwork.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:58:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HodTpqhEWd1xQLbKj2xYw%2BQqL%2FiKnp8MCZEFPovgl4z6lJRwjVtPxqWjukF1Yyf9UZlF7ZLaxbjhr9Y6msbH9g%2FCpL3w7ZNmrI50NJB0dd7NAEK3ti37%2Bp6KtL8usXBCRetrHa2SMikkK5hBC4LulQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17eeb0b2e2b5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":760,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"eb1be3f5478c6751f0de6e9128fecbf2","sha1":"94b9d1087b2551a6ab432abc63d64cafb5c212ad","sha256":"6e95d3011ecc51a72fec8b2a8e5b06b4e134c2b2cfe513bfce42d9029c6c8dd1","sha512":"78753808ec755c160823978aa8ebcc391c7c2c71a0b27c2271f2aa0be61349fff888e3775a9fbe9bef7f22d01adb60e1480356fa4654999ee40e6439e32f28e4","ssdeep":"","tlshash":"61c02b7d3513bc4cc5a3317422c37090c0da833764ba81128440810331cf3998ac3397","first_seen":"2026-03-26T19:37:59.367855Z","last_seen":"2026-08-07T21:33:50.857333Z","times_seen":1639,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T11:58:36.664Z","timestamp":1783511916664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 22:42:56 GMT","end":"Sun, 04 Oct 2026 23:41:28 GMT"},"fingerprint":{"sha1":"2E:2A:62:F5:8E:23:5C:4A:BF:36:8D:11:AC:2D:F3:47:04:56:A9:EE","sha256":"A1:25:89:EB:6B:C8:9B:18:12:72:E4:A0:37:5E:2D:6A:19:D0:E8:F0:B5:F4:21:5E:B0:AB:19:37:20:76:B3:07"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: distribution-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:58:36 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=peefduX9bNUOj%2BQjZ4q4L4jz%2FCLcMul881snelWpagx2aNe4gecN6wHi6hZwjtdrDa2iVsrPmZSOnVe5szvdQXFdv5dau3JhpGJHI9W8FwkGjLk%2BLYdNQHGwZX5RD6cfvl6MCpZsbmtQd4hipH26dQ%3D%3D\"}]}\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a17eeb07ae075694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":389488,"size_decoded":55184,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (375)","md5":"93c7f6ee513da28e0c79d920c222ead9","sha1":"720159ad621628bf13200d3c79e7b365463de243","sha256":"2e3ed1f79129549e849d44fe959ba5a403c66b6ddc13ffe374b85db7837c46f3","sha512":"2a0214231eb94985c8577f1c1a082cf751326a33ad59a07a67dd4ec383ea24e3ec34b4bb0efb5603de8f5dea04158282ab108f3a67b736f0e3e530afec669324","ssdeep":"1536:iMs1U5jbBJ/7/pSMuJJk6TKLfQvii10C7Wwd7CEKLiviiECwEaImb4gxJn2RGa4O:KU5jbvtpfdjlbLt+p9is","tlshash":"8c84c8b2f2f112e7501f53d8ea765506efd060fbd1468ec8729c4ae49f46c9ca8d224e","first_seen":"2026-07-08T11:27:46.06073Z","last_seen":"2026-07-08T11:59:26.974446Z","times_seen":2,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":63,"connect":16,"send":0,"wait":121,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/29d75789b264c294.css","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://distribution-flarenetwork.xyz/","date":"2026-07-08T11:58:37.116Z","timestamp":1783511917116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 22:42:56 GMT","end":"Sun, 04 Oct 2026 23:41:28 GMT"},"fingerprint":{"sha1":"2E:2A:62:F5:8E:23:5C:4A:BF:36:8D:11:AC:2D:F3:47:04:56:A9:EE","sha256":"A1:25:89:EB:6B:C8:9B:18:12:72:E4:A0:37:5E:2D:6A:19:D0:E8:F0:B5:F4:21:5E:B0:AB:19:37:20:76:B3:07"}}},"request":{"raw":"GET /29d75789b264c294.css HTTP/1.1\r\nHost: distribution-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://distribution-flarenetwork.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:58:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6a4bcfc6-1b1ae\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jUJNDzq9UfDKrtgqBqNeIWeFQuho%2BTOVwI0nayhI1hXpuAAHoGccyrx5LZsb46tYOR%2F8JG9%2FwT2snxX0UVpEcMebdiuEKElUQVGi45woJuqq6vD590cuAfcyHwqF1Q7kLZyKGulRoqei6HHjegje6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17eeb09fe1a5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111022,"size_decoded":15764,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (16853)","md5":"7acc17db58b14669a0841b94c1bb4408","sha1":"9b93c309a0db448eb1d55ba04704368af203aa76","sha256":"8f7eee3ea14c27a30f43f5def41e58c0dc661c252fee8537ae4f834a04b18a80","sha512":"47d862d470dd862258de97fd124ba6c0e2807cb1e867058d721767632c52bc6f355b1f032c66d9dd633de89f2307570417cbeb53874893ced5d68ee1566a667b","ssdeep":"768:KWeCQlBkIapPd6GvZbpyFV7vYyafVcVVyN1HQtlmsbmHDmxHC8hjg+8eItV25ZX7:KbliIapPd6GvrtfVcRids","tlshash":"a2b30e13b6f5137fa05d244af6915804efd074ebf2ca9fe0940edce588899a226f174b","first_seen":"2026-04-24T15:23:41.479963Z","last_seen":"2026-08-01T08:41:17.50658Z","times_seen":13,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/b85a5d1553cdf244.css","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://distribution-flarenetwork.xyz/","date":"2026-07-08T11:58:37.118Z","timestamp":1783511917118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 22:42:56 GMT","end":"Sun, 04 Oct 2026 23:41:28 GMT"},"fingerprint":{"sha1":"2E:2A:62:F5:8E:23:5C:4A:BF:36:8D:11:AC:2D:F3:47:04:56:A9:EE","sha256":"A1:25:89:EB:6B:C8:9B:18:12:72:E4:A0:37:5E:2D:6A:19:D0:E8:F0:B5:F4:21:5E:B0:AB:19:37:20:76:B3:07"}}},"request":{"raw":"GET /b85a5d1553cdf244.css HTTP/1.1\r\nHost: distribution-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://distribution-flarenetwork.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:58:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6a4bcfc6-13167\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nUo%2FrBXZ9w8HsbAmoyrTxDa%2FcMaLYZCWj0kLK3%2BMY5T%2FZeEtRjpl9t%2BTUsa%2B8KC%2FU2MWbdqiNY7wk2eHRxHFfJilA5pPGJh0Zc8r4kENRV%2BIlAly8uCdo5%2FYYBl9XLt8UDvI74PFy6NQnMLjRqV0rA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17eeb09fe1b5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78183,"size_decoded":11863,"mime_type":"text/css","magic":"ASCII text, with very long lines (11983)","md5":"cc8b2707b54a4c12f19dff22508e5cf2","sha1":"84a5ee0a968bcf76acfd7661577712ca9c4150c6","sha256":"7564f93308d67dd43346f1b6f91a9c2e58e50b4b15d72536d1e5822b5d9dc98f","sha512":"6c51be67ead0d9a354a80064848bfe79cef95a4f863a815c64c3c3a43f0955a4ff940c65a60bc2be68b17621ba5e53002af1c13331e2ad7b1db8a4ff8c0bb33a","ssdeep":"384:XeUw08ZHQlDjjNQDdUgLpOy5vIdSJaCaJCrm74FW9BDkKcKphgyoUhDcJH+GldYu:QZwlDjjODJ5gcrq4+p/CGMmxG","tlshash":"4e73fd57b5f1132fd02e2052f1c25c48dfc4b0dbf1899fd0650e9dea429aab266f1b86","first_seen":"2026-05-16T18:36:08.651774Z","last_seen":"2026-07-08T11:59:26.976412Z","times_seen":7,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/d5170cc3037aa5ea.css","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://distribution-flarenetwork.xyz/","date":"2026-07-08T11:58:37.120Z","timestamp":1783511917120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 22:42:56 GMT","end":"Sun, 04 Oct 2026 23:41:28 GMT"},"fingerprint":{"sha1":"2E:2A:62:F5:8E:23:5C:4A:BF:36:8D:11:AC:2D:F3:47:04:56:A9:EE","sha256":"A1:25:89:EB:6B:C8:9B:18:12:72:E4:A0:37:5E:2D:6A:19:D0:E8:F0:B5:F4:21:5E:B0:AB:19:37:20:76:B3:07"}}},"request":{"raw":"GET /d5170cc3037aa5ea.css HTTP/1.1\r\nHost: distribution-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://distribution-flarenetwork.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:58:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6a4bcfc6-e99\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NiKjxY0bFCJjULA7BlzpL2A1aFOJ9L4TVB1QHUzJAe%2FKtYytgaQEnIVEVku5LO0%2B%2B%2B%2BopXXEXATL5UNAYrR0rlDMFr%2Fl92zgBFCMARQzRumTARMWQFJVo9NRhDi5ghakXauv%2F6NytrNjvSHnxyaq%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17eeb0a0e1c5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3737,"size_decoded":1779,"mime_type":"text/css","magic":"ASCII text, with very long lines (3736)","md5":"476e8950a1e70e093e13ef6cc4d9b5cb","sha1":"1032f7332b6bbd9ab2f40a9b6b6c9f25c95948e0","sha256":"544a2d4c3c7dd9d002fbc661ad37e3bea8e4e2a8726a3157eb6041a3660bd0df","sha512":"38690ab286c3973e363a3ad99f94b05656251fe92ef482cf614ca233f23695b9587bc0c3d76ed0474f920ffdff97db2cedab032fae5e4d1a2f05f12b6b325452","ssdeep":"","tlshash":"ab71bf73ea35e028f2268d573782755e17089876649787b5ee33ed0dc8e37b31212b08","first_seen":"2026-04-24T15:23:41.471553Z","last_seen":"2026-08-01T08:41:17.488312Z","times_seen":28,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/64cb809db4dcd785.css","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://distribution-flarenetwork.xyz/","date":"2026-07-08T11:58:37.123Z","timestamp":1783511917123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 22:42:56 GMT","end":"Sun, 04 Oct 2026 23:41:28 GMT"},"fingerprint":{"sha1":"2E:2A:62:F5:8E:23:5C:4A:BF:36:8D:11:AC:2D:F3:47:04:56:A9:EE","sha256":"A1:25:89:EB:6B:C8:9B:18:12:72:E4:A0:37:5E:2D:6A:19:D0:E8:F0:B5:F4:21:5E:B0:AB:19:37:20:76:B3:07"}}},"request":{"raw":"GET /64cb809db4dcd785.css HTTP/1.1\r\nHost: distribution-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://distribution-flarenetwork.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:58:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6a4bcfc6-424d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Roa8kS74s9Bq6HshKxwf6Fpx7VZDNzpViOjMrkS9Zoh7YEVQHQvt6gefjBwab%2FH8M8a97GqOIBZmAYxTiabGkljR0MlSzwzc0fYyeEN%2B7cdGqmJRhci0%2FVEsMRC7YxqTARai5HXYe1yTU56knMbiEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17eeb0a0e1e5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16973,"size_decoded":4109,"mime_type":"text/css","magic":"ASCII text, with very long lines (4867)","md5":"f12ef104c3b25c730865f7ed5789c322","sha1":"ba19c7054add04f0bf0e992a881527141eec062e","sha256":"0571062658eaf4268d877c454446432d81fb44585bc7efe0ebf01d4c8369601f","sha512":"6218a6e159f9a86b93a4512c4c4081e8f47d83ea4d5f96eae247ee578b0174a04ab1a4eb15fa30d8a84f7088ca2f9e4437a1ee6dc83304e5c5ae265a99ea6232","ssdeep":"384:SY6Rh6yXjZQmtVAYJQK1h/+SG5JZnWwrf7AZnp:OftpJVTDSJZWwrzAZnp","tlshash":"ed7235856360192793170e3297a18bb4eaa458c14bc3dff990c1edd4c2f6db913af296","first_seen":"2026-04-24T15:23:41.465528Z","last_seen":"2026-08-01T08:41:17.499914Z","times_seen":28,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/omega-module-v2.7.min.js","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://distribution-flarenetwork.xyz/","date":"2026-07-08T11:58:37.129Z","timestamp":1783511917129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 22:42:56 GMT","end":"Sun, 04 Oct 2026 23:41:28 GMT"},"fingerprint":{"sha1":"2E:2A:62:F5:8E:23:5C:4A:BF:36:8D:11:AC:2D:F3:47:04:56:A9:EE","sha256":"A1:25:89:EB:6B:C8:9B:18:12:72:E4:A0:37:5E:2D:6A:19:D0:E8:F0:B5:F4:21:5E:B0:AB:19:37:20:76:B3:07"}}},"request":{"raw":"GET /omega-module-v2.7.min.js HTTP/1.1\r\nHost: distribution-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://distribution-flarenetwork.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:58:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uj2fv%2Bpl%2FRAjj2tIH%2FeWbusQzNQtb%2BZjA91wa9nhqdMFEHuOAcYRduJw56FPXHS6bwv8KU%2BPbeOKcBaFO71byHRw%2FocpwREe88MJQHMUOHy3XNSHEa5bsxGpP%2BjhT6x8K8QcCaHmQpNA03lNF4o1qw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17eeb0a1e1f5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":762,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"eb1be3f5478c6751f0de6e9128fecbf2","sha1":"94b9d1087b2551a6ab432abc63d64cafb5c212ad","sha256":"6e95d3011ecc51a72fec8b2a8e5b06b4e134c2b2cfe513bfce42d9029c6c8dd1","sha512":"78753808ec755c160823978aa8ebcc391c7c2c71a0b27c2271f2aa0be61349fff888e3775a9fbe9bef7f22d01adb60e1480356fa4654999ee40e6439e32f28e4","ssdeep":"","tlshash":"61c02b7d3513bc4cc5a3317422c37090c0da833764ba81128440810331cf3998ac3397","first_seen":"2026-03-26T19:37:59.367855Z","last_seen":"2026-08-07T21:33:50.857333Z","times_seen":1639,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/close.svg","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://distribution-flarenetwork.xyz/","date":"2026-07-08T11:58:37.143Z","timestamp":1783511917143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 22:42:56 GMT","end":"Sun, 04 Oct 2026 23:41:28 GMT"},"fingerprint":{"sha1":"2E:2A:62:F5:8E:23:5C:4A:BF:36:8D:11:AC:2D:F3:47:04:56:A9:EE","sha256":"A1:25:89:EB:6B:C8:9B:18:12:72:E4:A0:37:5E:2D:6A:19:D0:E8:F0:B5:F4:21:5E:B0:AB:19:37:20:76:B3:07"}}},"request":{"raw":"GET /close.svg HTTP/1.1\r\nHost: distribution-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://distribution-flarenetwork.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:58:37 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a4bcfc6-541\"\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XJNwOfybPfQAZOTh4oV4UUtu7w4Tut7EqYMrc19cEko4BOdtcn8EuzsWybIATU6EhdhHWHlFfHInQLTtolGpCG9VOrSv%2Bm5pmfCvhgY5hhNhIgszYvL%2FQNsIwuq4%2Ff%2BzwrSG1O3kb29arafPU%2Fgw4g%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\ncf-ray: a17eeb0a2e235694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1345,"size_decoded":1389,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"463a29230026f25d47804e96c507f787","sha1":"f50e0eac87bb8f5cff8f7d8ccb5d72aedda7e78d","sha256":"a049e1abe441835a2bcf35258936072189a0a52d0000c4ed2094e59d2afd189b","sha512":"83f065b7b10e906ef8bf40dd907da4f0eb0f4c28ee2d8b44e418b15f1c06884a579957b2bc27418fac5759825d394819ff0ac48d784b9f05564b8edab25d9426","ssdeep":"","tlshash":"2c21e5fc520853f49d587e98a8623077954514bbbf9db8c8928c847788c53dd4ec8d58","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-08-13T08:43:55.472759Z","times_seen":66724,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/poweredbtcky.svg","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://distribution-flarenetwork.xyz/","date":"2026-07-08T11:58:37.145Z","timestamp":1783511917145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 22:42:56 GMT","end":"Sun, 04 Oct 2026 23:41:28 GMT"},"fingerprint":{"sha1":"2E:2A:62:F5:8E:23:5C:4A:BF:36:8D:11:AC:2D:F3:47:04:56:A9:EE","sha256":"A1:25:89:EB:6B:C8:9B:18:12:72:E4:A0:37:5E:2D:6A:19:D0:E8:F0:B5:F4:21:5E:B0:AB:19:37:20:76:B3:07"}}},"request":{"raw":"GET /poweredbtcky.svg HTTP/1.1\r\nHost: distribution-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://distribution-flarenetwork.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:58:37 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a4bcfc6-eb2\"\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UcxFLolp3rUjHPbdXX6lHoLnCVGYJj3jGbXW%2BSRDfPOIPlBx9x6MxLkzVk3Qf0R0GR5%2BfMfcDZNcs95Ae4AznODgJDY0dIXHwZNZsJmNNOWm4SljXb02XhLnDDOZMFxC5A%2Fg8sACRsa20kJJshpxFg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\ncf-ray: a17eeb0a2e245694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3762,"size_decoded":2056,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e4df113ede6d5ce8de2dc1338a3890e","sha1":"3af1721ca29f4ada0cd422206c253cf8ee52781a","sha256":"911f58b8d14bd6f73a83fd774e44bec97e896317c7093dc83e96921e64f1fbd5","sha512":"12c975049692f337fced697963359f535b7d08b4b230447cba37b6e5c8c1fd31e8f26329a315454c83e51ca41787737428e3932979156e205cf0feaadde8fb97","ssdeep":"","tlshash":"967195cb36ec61e0f9006f78db2b20654dae34f666d1d3d59540fd9564a2e9f464ccc0","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-08-13T08:43:55.433319Z","times_seen":33028,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/6cdcfbcc140e7bef.css","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://distribution-flarenetwork.xyz/","date":"2026-07-08T11:58:37.114Z","timestamp":1783511917114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 22:42:56 GMT","end":"Sun, 04 Oct 2026 23:41:28 GMT"},"fingerprint":{"sha1":"2E:2A:62:F5:8E:23:5C:4A:BF:36:8D:11:AC:2D:F3:47:04:56:A9:EE","sha256":"A1:25:89:EB:6B:C8:9B:18:12:72:E4:A0:37:5E:2D:6A:19:D0:E8:F0:B5:F4:21:5E:B0:AB:19:37:20:76:B3:07"}}},"request":{"raw":"GET /6cdcfbcc140e7bef.css HTTP/1.1\r\nHost: distribution-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://distribution-flarenetwork.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:58:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6a4bcfc6-1d65f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mFZdc800p4DAJ0%2FNfMZTTIClNUQDv7cUQPOCISgncNiONwjYRvbCcHtSQqVlmiYvahtsuQSjI43XL7629uIWWbKDiVQmlx1qu2HAzm%2B8mdSbXlN2TNjq9AlSJdjwGY%2BFlgoLItR%2BJA8jbbQ6g3AWPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17eeb09fe185694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120415,"size_decoded":16919,"mime_type":"text/css","magic":"ASCII text, with very long lines (11939)","md5":"9e03833ab9c10d491a04b6dae234ef09","sha1":"69fb24e452ef965718a0d642cb5b82cdbb00d1e6","sha256":"9ce5d79c8b23756bbfb0929f53cd795e5328d3b92f13b78f0cb0873c3e6015aa","sha512":"43d0131d1c76623eabfbe78b300fde4a1e9db2c841220dd06fd7cf4dead24941a0d11fd42958c94cd481f2e6e12bbfa8f4dc86e56211c4421919db74cdd0b47a","ssdeep":"384:S1nJibNBbTA8orrhvUHQ1SS7GK40MAEQgzROuxTf3C5d2PgiKPVID8JXF44pivra:aZovqqlGoBB1c58rmsWNf","tlshash":"ecc31f43e9f4133fa05d2106f9d16808efc0a4ebf59b4fe0580edde54489aa66af2747","first_seen":"2026-04-24T15:23:41.464721Z","last_seen":"2026-08-01T08:41:17.483427Z","times_seen":27,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/579c7f5cb4a415ce.css","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://distribution-flarenetwork.xyz/","date":"2026-07-08T11:58:37.122Z","timestamp":1783511917122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 22:42:56 GMT","end":"Sun, 04 Oct 2026 23:41:28 GMT"},"fingerprint":{"sha1":"2E:2A:62:F5:8E:23:5C:4A:BF:36:8D:11:AC:2D:F3:47:04:56:A9:EE","sha256":"A1:25:89:EB:6B:C8:9B:18:12:72:E4:A0:37:5E:2D:6A:19:D0:E8:F0:B5:F4:21:5E:B0:AB:19:37:20:76:B3:07"}}},"request":{"raw":"GET /579c7f5cb4a415ce.css HTTP/1.1\r\nHost: distribution-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://distribution-flarenetwork.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:58:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6a4bcfc6-7711\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4kOC8df1fqF7oEySHGR02dc2VXQ%2BdAX9WvR%2BJAvDyM8zwrdSrJmxm5DI1om6%2FP5s5KMyQLv9eC8v7vcbI84rlmfv80oLNBwCPzVR%2Bp5fAmLOqzVVIs8UGbTUsKYK7X3G5nT1I9YTg3cUk9HEw76d%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17eeb0a0e1d5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30481,"size_decoded":4745,"mime_type":"text/css","magic":"ASCII text, with very long lines (10182)","md5":"c986ad8c9796cbae33d49deb8538ba5b","sha1":"357407f751a8b8e02ff98621312e6d58f84c3baf","sha256":"e35b0fea230c68bbdfeaccd85bec05ae7f46dc53114cccce2a7533826c6ce385","sha512":"d078e7a477b22f951c3e29fff59bc5af1e34ac2b137ff8b2501d8104d62e06eb08fa9ca6b177cbf40a8c46766e53c71e31dad4698eac7633d459ee60c912dae3","ssdeep":"384:G9PqbwLV0qxkaEHS+0f1x9gMcHe+MFBohb+GsWNrChqkALVb8xMqlhiqKyj0xntA:2acx6CKN2T","tlshash":"ddd2ad43e2f4173f605e1186f9828948dfc464faa1968fd0290ecce594da7b27af1b47","first_seen":"2026-04-24T15:23:41.461599Z","last_seen":"2026-07-14T20:24:26.195451Z","times_seen":23,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/light-bridge-v1.7.min.js","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://distribution-flarenetwork.xyz/","date":"2026-07-08T11:58:37.131Z","timestamp":1783511917131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 22:42:56 GMT","end":"Sun, 04 Oct 2026 23:41:28 GMT"},"fingerprint":{"sha1":"2E:2A:62:F5:8E:23:5C:4A:BF:36:8D:11:AC:2D:F3:47:04:56:A9:EE","sha256":"A1:25:89:EB:6B:C8:9B:18:12:72:E4:A0:37:5E:2D:6A:19:D0:E8:F0:B5:F4:21:5E:B0:AB:19:37:20:76:B3:07"}}},"request":{"raw":"GET /light-bridge-v1.7.min.js HTTP/1.1\r\nHost: distribution-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://distribution-flarenetwork.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:58:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6a4bcfc6-300a19\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MV%2Bxna2g69kgs6U8J4KYYdtslh7FRR%2F6vooKiMMJuOAzshPGv1P5EYCyMEFzWG6o3KEPF3uwvOT3gm%2BQs8sVxwkvopCUjJsFxFFjsaRfSChXE0jVvxlKmfdljDGUsC3FvhMW5K8y%2Fsk96Br7BVtCsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17eeb0a1e215694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3148313,"size_decoded":923208,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"00b1dba76bd32f7e684ef87c5f8ccb33","sha1":"ec512c8cbe91ea883d1ffdaf3ccbcd715f75b9bc","sha256":"ad416908e16741636cb2bdd3f2597a30e39e76b1dbec1502006b24322b3782cf","sha512":"f5c21163c09d86e7ebf24a1e4fb9c886fbc5642f9cb750d940acde817ec4f0aa319b6df872379b3b6981ed953444f7cb3ada104b99f72f675c3b893ad8db4009","ssdeep":"24576:byqX6t0gZbPT3LHzfHHoGXbouoxi99aD7TTTrzDP4KICSO/xsLD94eYNUbeNNVN7:bymgbVkU5l/ri8V8UNFi","tlshash":"0f258413a2d038d251d75fb1b62750daec2d4bafb48c9afa998cf834bce1054e5d8634","first_seen":"2026-06-18T16:06:38.940378Z","last_seen":"2026-07-08T11:59:26.980699Z","times_seen":5,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/assets/flex-layoutdock.js","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://distribution-flarenetwork.xyz/","date":"2026-07-08T11:58:37.133Z","timestamp":1783511917133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 22:42:56 GMT","end":"Sun, 04 Oct 2026 23:41:28 GMT"},"fingerprint":{"sha1":"2E:2A:62:F5:8E:23:5C:4A:BF:36:8D:11:AC:2D:F3:47:04:56:A9:EE","sha256":"A1:25:89:EB:6B:C8:9B:18:12:72:E4:A0:37:5E:2D:6A:19:D0:E8:F0:B5:F4:21:5E:B0:AB:19:37:20:76:B3:07"}}},"request":{"raw":"GET /assets/flex-layoutdock.js HTTP/1.1\r\nHost: distribution-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://distribution-flarenetwork.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:58:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 06 Jul 2026 15:53:50 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a4bcf8e-11118a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W3qTeGJYz2PAr1%2B%2Fiu%2FcWZ%2BnQkgs1J4IekBHyHDU1WKhUP7gGRConCLBUEbQJKPtiecWfUrffnboRC4tGl9sITkFiY%2BclHmDi8suQkBg%2FrdH2CqhBrD1lFY2gMLej1C%2Fa4IEDfgL2qd0Jc0QO7eRSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17eeb0a1e225694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1118602,"size_decoded":268716,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42734), with no line terminators","md5":"890f92986327c4a617a493085ee9bdc6","sha1":"652e58f7aabe537940a47e3a797249ea64e9bac0","sha256":"40d2226998abcb66869a16d1bfc734538a67a04c17410e9c6ce282e127f8c77f","sha512":"29c2c34bf5190f9c87f05a42ca8c9c569fb552c8c2f66dfd22b8a9b40ff54591ab599e6606dbd8f387f636fb0a7d35ce1edd7900d092c9d150bdc86619194cf7","ssdeep":"6144:MtIN+bq9CMJI+bq9C/ZE15RvkbYRE5V+XXZHlgRZHqvne9tjlN05HysxOI4SSnmT:2GYdlsdqvQjASsxOIGZLm","tlshash":"2735edf713948d2f84ebe9c5cdb54c0c18b587d56e2a658aad339d8bc24c7f50ac8788","first_seen":"2026-07-07T07:20:36.260532Z","last_seen":"2026-07-24T09:08:37.176894Z","times_seen":6,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"distribution-flarenetwork.xyz/Flare.svg","fqdn":"distribution-flarenetwork.xyz","domain":"distribution-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://distribution-flarenetwork.xyz/","date":"2026-07-08T11:58:37.147Z","timestamp":1783511917147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"distribution-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 22:42:56 GMT","end":"Sun, 04 Oct 2026 23:41:28 GMT"},"fingerprint":{"sha1":"2E:2A:62:F5:8E:23:5C:4A:BF:36:8D:11:AC:2D:F3:47:04:56:A9:EE","sha256":"A1:25:89:EB:6B:C8:9B:18:12:72:E4:A0:37:5E:2D:6A:19:D0:E8:F0:B5:F4:21:5E:B0:AB:19:37:20:76:B3:07"}}},"request":{"raw":"GET /Flare.svg HTTP/1.1\r\nHost: distribution-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://distribution-flarenetwork.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:58:37 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a4bcfc6-37c\"\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NPwQ7MFVF6FtWztn2wND9T0TvopvSuJB%2BCHm6VKFm41dDSsVUScpcHzSZvR2UA0zU%2FrGqfVPHom6HrzRXjb%2FSOQftyXvoOm%2FRL%2FPvPbKi0hFJTSMWn1Sp3IOGqoFOOm2H3TtNYUmVdPk2d678VnAIw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\ncf-ray: a17eeb0a2e255694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":892,"size_decoded":1169,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"595f973187a90d91245e6adbd03e6f78","sha1":"84cf19963d52368852d083a4377e2359d57f5db7","sha256":"b32962a5e4467193bb585ce81d604de083405dba639e7a32154dc39958b50cf1","sha512":"1507e4cc3a19a71943ae16bb68b5cd34a8522f1e2712c770b9f3ddd7a52ae6c42788f9450cfad59fa9b741cbccf15592e5f248f56df154614600dc7e0219c57f","ssdeep":"","tlshash":"bb1100e423ad82c4f906d3300aab787321873dfb49534b98e0812d14d60b46edc35f48","first_seen":"2025-08-11T21:39:04.753608Z","last_seen":"2026-08-01T08:41:17.478958Z","times_seen":44,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"distribution-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}