{"report_id":"984d2bf2-d545-4f10-8619-00ab0d2a5c83","version":6,"status":"done","tags":[],"date":"2026-01-02T23:46:23Z","url":{"schema":"http","addr":"register-midnight.network","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"register-midnight.network/","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"title":"Midnight | Bringing rational privacy to blockchain","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"register-midnight.network","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-06T23:46:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"midnight.network","ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-29","domain_rank":435128,"first_seen":"2025-10-22T18:22:02.762818Z","last_seen":"2025-10-22T18:22:02.762818Z","alert_count":0,"request_count":1,"received_data":538,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"register-midnight.network","ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-02T23:46:24.344163Z","last_seen":"2026-01-02T23:46:24.344163Z","alert_count":26,"request_count":26,"received_data":7536171,"sent_data":13230,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"register-midnight.network/30619183-0ee7-42aa-b0d3-90621b70773a","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-05-13T03:42:14.185593Z","times_seen":5084,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"57bf9350ceb9303e4e355d661e8b5dae","sha1":"9dc079f6c844d9cf17a6ad86a92d4f998df6adf6","sha256":"18f851ddeaddda4c5aa64c820824fdd5a2048cd8115c3d1a246f5313d5ad120c","sha512":"cc21e6927eb3ce231766c416c63050f7d84529d9824b386063fc1fbd4e8a340fa1a18c565cceb2f8fad60901b84827ad380e7143dd9189b82d89330f72bfeb2f","ssdeep":"768:0DAwGccMlwD7TGKQQp6T+DoMJwoPRCP9P+Cly7WYc9frlZ0cN2RScapcxckBcg/v:klwD7TGKQQp4eoyVMPzAgfj2R0RbK","tlshash":"937394e5991b85e48d1164ddd873ed0ae0684d23ddacf1a3ba2ceec2741df62c44327a","size":74327,"data":"","first_seen":"2026-01-02T23:46:29.895878Z","last_seen":"2026-01-02T23:46:29.895878Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/lottie-web-5.12.2.min.js","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d72c73307e5ad75fec53bacd5ef03c0e","sha1":"1ca7601ec82e8a7f91933a84394bdb978c4a69a4","sha256":"1d975319fcbde9da908d69ba0b0f755d8f9cb0206c39b260bc3b9962dcfab709","sha512":"2a794842d3eb971a4608f33a30a0e0b095b53f99f8d555502c4726b9cf4baf62dea6a5eecd3e24bad147a4177321623280273a0cb332be39dccbec698b5aaa9a","ssdeep":"1536:BF0D7TCKQyr4L0Ho080Dp7/2BshkxvhkOhf7QzaFVj:BFW5LBDGv17b7j","tlshash":"357385da580b85e98d1154ddc877ec0de06849639decf193ba2ceecab41df62c44327a","size":78213,"data":"","first_seen":"2026-01-02T23:46:29.892438Z","last_seen":"2026-01-02T23:46:29.892438Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/2db50890-6505-4c6a-a84d-9aae011a0477","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-06-04T05:28:11.313644Z","times_seen":5038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"register-midnight.network/ad443f6fdbb0ae48712b1729b6a0a61be245577f-829x832-4.png","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://register-midnight.network/","date":"2026-01-02T23:46:00.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /ad443f6fdbb0ae48712b1729b6a0a61be245577f-829x832-4.png HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 39582\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\netag: \"694ef30b-9a9e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RcJDwrcOWffOj1KwqHVzi9YYuH5ukpCh34eCQAnOiu7wNVjt5OHbTes7W3lfFUJqxkbt0ZxBQ6uB1gWl3rQB%2Bl9VlnAR85AWRZuMxLwZHGCOWlGmnoNl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b7e221f4c155687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39582,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 829 x 832, 8-bit colormap, non-interlaced","md5":"b1f19c332684538336e388d9cefec2d9","sha1":"77efb890bcd356398b29fdc4017684a144b99dc9","sha256":"5c7ff1715e96e732d863eb48720b05e1c6ed636be792ef7393c54e1037485f6d","sha512":"fa041e1af4bd2bea26b71478232ec719e187ffb956caf5c4ef499a8b3c93c8f911ab4745e971bc4de5b659f6c5e44512c613fa49d108cd02364263cf0404d887","ssdeep":"768:nodn9s7p4IMCwdLvgMUWlDCwciX/UnCCRuePbuJnpQ8rfZYVFA0oh6EwfS:pKbgM3C9CPey7dfZ8/oAEJ","tlshash":"740302b0960312f6f28e091692298760b0ed416c2a395532ef88567e87df09bb5fdd93","first_seen":"2026-01-02T23:46:29.876431Z","last_seen":"2026-01-02T23:46:29.876431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/index_3.html","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://register-midnight.network/","date":"2026-01-02T23:46:00.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:00 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dkyBfiRO2tuMORqNzPpkTkZu3cAaxsDMZtosHZQrsmdk9PM9qg34LCsbnlNx86RNex40XGWPhgKfeqAAXmH9hih7IV7Txe8L2BN5LvY0jWPKKfEAomlb\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b7e22226c345687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"14bf35cccad01d3399d1002a9f600606","sha1":"b464171b698428e748c3c5a0fc7e7b5262cb723f","sha256":"e4b4aaef47dff3cf367570589896a7018434b1a8e8d3184df5d1d6de4d417393","sha512":"4c41aa68f11f6e4ce08a3319244e61fa20a38d7eff64b8e0269c451b3b77871e4a08804df21cfb6bd329079279623caec2930268f7dd2dc6b44379dd829917a7","ssdeep":"","tlshash":"87d09722e509440e9c018ad2cadae2c8c043d92cfb206d287cb63620a25c237843162d","first_seen":"2025-07-31T08:00:00.385379Z","last_seen":"2026-05-19T11:07:45.333974Z","times_seen":28,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/index_8.html","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://register-midnight.network/","date":"2026-01-02T23:46:00.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /index_8.html HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:00 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CzM1KIwRw1mEVi0Zk5oUtgocsjKRCYNVpJ0z1EAyK5y%2FkYY2lBTx5LnAB8C37YtgCgma3OLJRLoU2GZ%2BWPBweRHhcSY3DCyDfDl61%2BbTR%2BHzwZRoSlKb\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b7e22226c355687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18831,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1751)","md5":"5588d785c32f25329470df615f406c37","sha1":"2670e2724745ab6a5831385a85431ad2e7c721c4","sha256":"515493666e16f5216a145b76a6faf7b0dd2b3acd929472e85421bf0168b42e21","sha512":"96b7c00a3cf60555a106af6608f423e385556476ab15e365cd825dc968fde77a92880e440f4cc20499ad9240baea25cdb9a91da29325f188e5406ec421245129","ssdeep":"192:VgHQs+B8Wsq52bqGIwV4Ds1yFQPp28hsqO2bqGIwV4gP19ZQTVS89sq62bqGIwVE:VLQqY4oxfqY4JRLqY42Bmw6","tlshash":"0982a5600817140197934ce623ce7f34fe4ea244b24295707bfd971faecbda692693ad","first_seen":"2026-01-02T23:46:29.879041Z","last_seen":"2026-01-02T23:46:29.879041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/index_5.html","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://register-midnight.network/","date":"2026-01-02T23:46:00.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /index_5.html HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:00 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2s0YW142zDaHypJkTiuQxNsB%2BQ9zmwMA85ClsiWhIm77qaQ4hrKDEA2BnV0uTUMo5m7n4KqBvGzlpBotH%2BRzgr6y1BZozBhPghspg1F3ZiC0URrVntrL\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b7e22228c3a5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":142,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"292f74c92c97c686c723a291030cfa93","sha1":"ff7ce2a278d64bb71b8a15797fd10276ea6f0df2","sha256":"baf0572ea402de47c8c0c44f67fe0b4af40bd7bc06f5733bac13f51bb4ac4d08","sha512":"4f34b0d47baba42b1c93958d291540f76e16fb3f67405fec9d87d0d8d57bf4ae454b63e8462a3b238ff1f6306323f7af84e182781658961d0acac1e55b70d953","ssdeep":"","tlshash":"54c02b22dc04480f3d009fd1cb8af1c4c003dc3ce8315c00b867b544e9ac131c012548","first_seen":"2024-08-19T15:34:07.77924Z","last_seen":"2026-06-04T14:53:21.608366Z","times_seen":443,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/0e27e1fbdbb1cb415485364e3d15b5c58b1a982f.svg","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-midnight.network/","date":"2026-01-02T23:46:00.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /0e27e1fbdbb1cb415485364e3d15b5c58b1a982f.svg HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/c960dfcf7a697d39.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:01 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"694ef30b-681\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eoIOl46uW19OLsQpoxCfH6CrEWQJHPtOXiWFqFZd8jmddLwopuix3SmkPVzdR3T2z5XrvZRQ41Ma7B%2BTOs4FFrmCMpTqQU1zStGDTJsCXC3l1NtAQ4RR\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b7e2222ec3f5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1665,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c69f0f46ae955fc55ace3a8ed5ee227","sha1":"0e27e1fbdbb1cb415485364e3d15b5c58b1a982f","sha256":"dc317edf7f950f8583171813a0771dc9a14726cbb77abe0c26923fe329796ba9","sha512":"b49d945538f55d495c7f3275dd56aa8c055db9974d8be5f63c2bc1b3a8dd129abba44728bbaede90e1cee2839e850997b7866254aeb5826395a04bcd06e2ab68","ssdeep":"","tlshash":"3731fee92354128c979be90dcd7a48647f5ff0b9bf4e4b8510af8f332087185db86829","first_seen":"2025-08-17T05:12:00.588523Z","last_seen":"2026-02-14T07:25:46.774958Z","times_seen":5,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":252,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/_.gif","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-midnight.network/index_7.html","date":"2026-01-02T23:46:00.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /_.gif HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/index_7.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:01 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\netag: \"694ef30b-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=boqPfL5k%2FNqCxKMSdIqhbKmhZJ42R7B18%2BshDiEAnpr%2BT4ndoPzGnf%2B14clD9eKvR6K4PLdeEyt%2B1i6cYpcs%2FPxFq5mv0phAF3AhlMBYI7YNuVbZOXc8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b7e2223bc4d5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-06T19:10:43.284508Z","times_seen":939143,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/logo_48.png","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-midnight.network/index_8.html","date":"2026-01-02T23:46:01.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /logo_48.png HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 2228\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\netag: \"694ef30b-8b4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q9r%2FL%2FkHsNBcKz3bJvwXOehiIIk8Bj6Uwr4UmfFm4w%2BB846wGhJzJ0Klxtrt0ZxcRXnDymmAPCY3f4Mx20FktqVf1OaxHouJ4rd06nlEhHs2Tr6j1UOC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b7e22260c655687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-06-06T19:11:40.677496Z","times_seen":647186,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/favicon-16x16.png","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-midnight.network/","date":"2026-01-02T23:46:01.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 624\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\netag: \"694ef30b-270\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hS7WO5FNXaUixQbqvSPexp5P1%2Ftw0IHb%2Fdk4su9fQPIxfsDmWThMQ%2FDI35Sf%2Fqe0dC%2B777UUxU1I%2FcDU3RYhbXnqERMCSLNFMY0bWAEJ0FvbvpKs5x%2BW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b7e22262c6a5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced","md5":"de5d1cdaaa4cca5c6e7147e5cd7c010c","sha1":"d709aa0433947741a56eab520f267165ad506420","sha256":"ebb04b5c81b2d9a68516e8072879580bdc21374535a12c05a18f25fdaa887eaa","sha512":"29c99dfbc691daac4f5663b3ac17ba96d1cb389165d54329f1520998161f704e7af758f7d1f958dc92312bac7a41a2bc7501ef2643eed28f3adc84234223dad5","ssdeep":"","tlshash":"79f002dab63873f2c80f22aa22a693c4ff28c10720d10c49b65cd37e1824b8b1db4d46","first_seen":"2025-10-22T18:22:16.267099Z","last_seen":"2026-01-02T23:46:29.88277Z","times_seen":2,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/c960dfcf7a697d39.css","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://register-midnight.network/","date":"2026-01-02T23:46:00.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /c960dfcf7a697d39.css HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:00 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\netag: W/\"694ef30b-1eec8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BBF71fVok9BF1w8g40k1xX%2BM8BO7b46D%2BubglybTlsIuLiXm8d1uZe1HiaLYjODxgComYNy2sBVOEwF88vcbdTg12vONvD07qHiyVZk7p0o%2FnR8gTfzB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e221f4c125687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126664,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (33148)","md5":"73a0ce2131983cd78880f56db9916ab3","sha1":"fba2740243143b6099fefab272b85541983d19fb","sha256":"61f02677daa6e9cebb5b736ed1f8265aa25ceb93aee7392e361a5e943bab6666","sha512":"7745def595fc9149a83d85d10f9ca856cab07269cade97a50b8c7d49045032f39abd6fb20517afaf6adc336ec31da33bb7c37c6260e3dbbd3adb6d268d847639","ssdeep":"3072:7O/T2p5xEFxCtai+Fy9KhZFCfedQfZDqjWV67S9F7uLyfh8NYvGWUxl9yY/ewgxO:qT2p5xEFxCtai+Fy9KhZFCfedQfZDqjr","tlshash":"0ac3c72e7740322a1c3784f3e2d2a9dcd62a99c1af3a96f7797211144fe52e71d13a4c","first_seen":"2026-01-02T23:46:29.883547Z","last_seen":"2026-01-02T23:46:29.883547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://register-midnight.network/index_8.html","date":"2026-01-02T23:46:01.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/index_8.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40128\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\netag: \"694ef30b-9cc0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5pkxVzwXcf0opu2doiK37vvruUWPRvxCEI1OUH1%2BZm87f1VEYQQnXO8dj4Pvg4DHeQnsP5Pi8PF8Yvnb%2B3yvI13sHIZICA%2F4EpEgYI6WgCqf%2BH8xBMqK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b7e22261c685687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40128,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-06T19:10:45.776348Z","times_seen":871307,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T23:45:59.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 23:46:00 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5qKcB0jHZ4JKGMgZNRqmkXugJF5rAgWh9CKH8tjjN4FBUAURfNIoL9xLLadr8GrIDbMYDfSAR5vdPq4FLddYypqVFRvfEx0C%2BXoy9daoVwQXiqBt9KVPEHY%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b7e221c992edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":376380,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (27911)","md5":"004dc4bafc5f6730b4974b0c308be0c7","sha1":"3731c7fc7c54d1324cb162eb3de684d48e394e9e","sha256":"53d6ab5bee7df58613aa682828d9f58378b278d91ea06a9ad3684becc37bda2b","sha512":"1780e2b5f0ceba64104f0f9137334375edc2356a4ffe730635795d1999a752012989700fb4795bbc15fb3f4549bf52b29e21a918d19901379b6639251c55b79b","ssdeep":"6144:hkshUYnKsMpbYnrZU9vQgslEsn7oTkmvYlbhXsXXwZ6NlNBVkOoNFnSDKSaz2r7n:Ws1SbYnrZU9vQgslEsn7oTkmvYlbhXsT","tlshash":"b4844f28e1f061767a2b622b538bf6ccb2746d535d05cb9cf9aa10408f89bff3443596","first_seen":"2026-01-02T23:46:29.884963Z","last_seen":"2026-01-02T23:46:29.884963Z","times_seen":1,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":43,"dns":24,"connect":1,"send":0,"wait":224,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/adsct-1.gif","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-midnight.network/","date":"2026-01-02T23:46:00.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /adsct-1.gif HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:00 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\netag: \"694ef30b-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dck1GLRVKbPAKM%2BdyqLXO7OHCvN6W8L5nNE6%2BWL5HAgkQYlUxzYI1HcMVx9%2BAo9oKmzQgXpKzu7eIkykuDXAlEoOv%2ByzYZYn%2F0GJu%2F2OclcsVNDLFlqH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b7e221f5c165687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-06-06T15:49:08.984163Z","times_seen":1100,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/index_2.html","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://register-midnight.network/","date":"2026-01-02T23:46:00.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:00 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UFfQQsQ3VqbIHJftL4c0IJr5%2FRHBRN36l11Lcj21wN8lpxANzSH4Qwr4JkbAjNWqHAfgxvBLsVulwek3wSh6LOowZTNaO7WNOsHeSA2eHK%2FMPiDk9Pk%2B\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b7e22226c335687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"292f74c92c97c686c723a291030cfa93","sha1":"ff7ce2a278d64bb71b8a15797fd10276ea6f0df2","sha256":"baf0572ea402de47c8c0c44f67fe0b4af40bd7bc06f5733bac13f51bb4ac4d08","sha512":"4f34b0d47baba42b1c93958d291540f76e16fb3f67405fec9d87d0d8d57bf4ae454b63e8462a3b238ff1f6306323f7af84e182781658961d0acac1e55b70d953","ssdeep":"","tlshash":"54c02b22dc04480f3d009fd1cb8af1c4c003dc3ce8315c00b867b544e9ac131c012548","first_seen":"2024-08-19T15:34:07.77924Z","last_seen":"2026-06-04T14:53:21.608366Z","times_seen":443,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/9cfcf4c70d4a8317abdb9a3b61cb07a6aac53884-708x708-1.png","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://register-midnight.network/","date":"2026-01-02T23:46:00.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /9cfcf4c70d4a8317abdb9a3b61cb07a6aac53884-708x708-1.png HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 21261\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\netag: \"694ef30b-530d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDWDRrfgKKMNUNzYtDi%2FEd3x3Qul0Ign6ZfBDOyGr3Obnf6Mej2CjQF7LZGirLf0qs9npxvS2nK%2BgGLEIeW7%2B9b5FMgXIgzcb%2B%2FQ6uSPYuyO6RDRSJuC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b7e22237c485687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21261,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 640, 8-bit colormap, non-interlaced","md5":"48371534fb0866cc093ba93f763885b9","sha1":"6c13c93d12cea74286bf5757ba3c1cb20b0e77bb","sha256":"da196f24d1fceff12abf2007c36ec60f1ab836c7cdbcf70b7810e4a1371ec345","sha512":"35a0d810ef48f3e02e0fd58458efc5653708fbeb9a4711cd15b6293ebce0fca14d95be3cd6afab3cbbc66115b7d6d2a4753f4d9497f70240289e56b4394cd146","ssdeep":"384:G2v/7nAazLUUloqznmUP18EmIUZA6UAUSsjtkygis5BMTO5qNYNC:jvjnAazMqznmdA6UAUSs9gx5BZ5quNC","tlshash":"02a2d0a9cf811c7c41bb6a3e2ea284920f99ec95a17f1e39c046fd986c3c541696e21c","first_seen":"2026-01-02T23:46:29.886648Z","last_seen":"2026-01-02T23:46:29.886648Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/secureproxy?e=jscdn/getFile","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://register-midnight.network/","date":"2026-01-02T23:46:00.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://register-midnight.network/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://register-midnight.network\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"sb8s2y4w44sp829us2jp\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self', frame-ancestors http: https:\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0RLWotvwz%2BZwF%2BgdGxrkpBuiJ5Rb0cDPEY5gOrw4Lf1eGpoooWkou01gp8IT4z8aTnqMk4phuHk3FZirjAqFfUuMnx7oLNLBmMXjzfDxrHAbYw%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9b7e22238c4a5687-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6722367,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4eef1a75ccfac74beae62ee7169c2d8b","sha1":"c6cf24aad75adaa1658a32a4fe7b05c0d212d30d","sha256":"14eefb90840f78963d1d6c4e2ca484969dc488ced95d2b865dba24df779eba08","sha512":"5224addd6806d61144bd59cb33ca8a9708a2e1aed16f02a3b2540ed564342fbc61658b2adbcfc045d97fae7dc81eaf0f9e0556faa8e76b0f862520474307cfe4","ssdeep":"24576:fJtvtpo0o8fFb6RjR+J+3z6JbFT1Q0irfWos:z7o0o8fFb2jR+Cz6JbfQ0iruB","tlshash":"c62512e9e482d1a33a65c577e7e16dd81d0e90debbc9e7b24c446c4030a64b4cbdc9b2","first_seen":"2026-01-02T23:46:29.888016Z","last_seen":"2026-01-02T23:46:29.888016Z","times_seen":1,"resource_available":false,"data":null}},"time_used":814,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":510,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight.network/apple-touch-icon.png","fqdn":"midnight.network","domain":"midnight.network","tld":"network"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-midnight.network/","date":"2026-01-02T23:46:01.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight.network","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:15:58 GMT","end":"Tue, 31 Mar 2026 19:15:57 GMT"},"fingerprint":{"sha1":"E7:AB:B9:78:D6:21:2C:5D:95:2E:B4:53:25:FA:2C:04:65:64:99:08","sha256":"AE:FC:31:A0:4E:9B:8D:C2:4D:F5:E5:4E:65:F4:7E:D2:17:5D:22:08:58:FB:D6:28:1F:6E:44:3B:88:7A:24:B8"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ncache-control: private, no-store, max-age=0\r\ncontent-type: text/html; charset=utf-8\r\nserver: Vercel\r\nx-vercel-challenge-token: 2.1767397561.60.YTEzYzEwNDVjZWNlZjU3MThkMTA2OTA4OGJlYmIyYzA7ZjUwMGQzZTQ7YmIwOTAwMGE3NWM4YzI5MDJjYzJiMjUwMzI2ODc3MzFkZmM1M2ZhZjszO8OaGrIjugNs0X9vAz94AwFvjP3UVEzI0JLKP/TjF2MGbO3d0M+n6i/KhkNnkMw=.43af594f7c8f0ebebdc92d93c74a96df\r\nx-vercel-id: arn1::1767397561-btGRHT9Q4iTMfreycrwaKAerkE1YMn28\r\nx-vercel-mitigated: challenge\r\ndate: Fri, 02 Jan 2026 23:46:01 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T19:09:46.661405Z","times_seen":16188449,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":32,"connect":1,"send":0,"wait":28,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/index_7.html","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://register-midnight.network/","date":"2026-01-02T23:46:00.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /index_7.html HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:00 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tkh4iDxCSbrKF9x%2B204fnH8CRhbmgX6dhwkXzO0U0HPvSV%2BOUTjX%2FM7Z%2BmNYKOcwwnjVBENXjhzwa%2BBHr56BDYzBoNbt%2FaWkwlXu9pFhRMeaO7qg1CT4\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b7e22224c2f5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":423,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e8c35780e1473b77b7e799f601284e00","sha1":"bd9684ba0e3547fb77abeb74e27dd393c7cdd218","sha256":"3a90471b8a7209c0c5117f9f2d69d8c507e3b865dc8765a3f4b80802a4eb4632","sha512":"20bb35f663b68d82f1a551b498e8d2176bd5b753e37f4490ae20d7b6d0a4d7a930821408afc0e3754c7030f0dd3e17dbcfe298fb2680ceeffbb81dd5a66c13ef","ssdeep":"","tlshash":"25e02b47e602300a8d60e2b00cd0f59018879316f7a28d43baa4e0346c483ebdca3899","first_seen":"2026-01-02T23:46:29.889552Z","last_seen":"2026-01-02T23:46:29.889552Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/da53325d50895429285f938389f1bdadc214fbea.png","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-midnight.network/index_8.html","date":"2026-01-02T23:46:01.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /da53325d50895429285f938389f1bdadc214fbea.png HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 683\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\netag: \"694ef30b-2ab\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qf0Ieq3Z6dyDhVNnwTcF%2FrrN4xzPSVZX%2F8DyvJQ1t%2FDrv9%2FW4a4ZhPa8puRol9uraqiiFA6Nvm3ZSgHWNhG5FM1l1nmMk6fRQC%2B01BOzqhiUeVgvSJmj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b7e22260c675687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":683,"size_decoded":0,"mime_type":"image/png","magic":"data","md5":"efb32ceda324e1612abe80b50aba63a3","sha1":"da53325d50895429285f938389f1bdadc214fbea","sha256":"f85b1a6a1cd2123c5064ad974f5d42a28ee55c6a2dcd4318a661c0a8958bf525","sha512":"57dc56c4f03d751825761c30ab51c0699da3c899f48dd8f74095c7ca6945f1b459ef202606de2cb20eca22336b7e8b054f3aa58447e3bc0bd64049b5b6807a17","ssdeep":"","tlshash":"0e0144181aaa1e6a5460b81bac61d81af566f0a408d003514a9855f15a23cba9406cba","first_seen":"2025-04-29T17:20:25.822726Z","last_seen":"2026-06-05T04:02:27.271972Z","times_seen":118,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://register-midnight.network/index_8.html","date":"2026-01-02T23:46:01.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/index_8.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40128\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\netag: \"694ef30b-9cc0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uhdfsT6u5v6rtesUJajUeWA4UIckO%2BKiyMytGUpuuWH0lThRRnInOtiYjlF8dK79BgLj4ZuwmitXQXCoB9ASpjLH5Lpx7%2BYfe8zTZDC3YKZW7q3ld6ST\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b7e22261c695687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40128,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-06T19:10:45.776348Z","times_seen":871307,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/index_1.html","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://register-midnight.network/","date":"2026-01-02T23:46:00.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:00 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PBFGxKGBHul7itNIWGPNEqUL5MwMYg11on4daNZUTvjWXRGPX89WY4O7K0yWoox5TeBQ%2BmimqLFTOYHKwOkTGaBzw2flM5YvJobwvkIdScx76aIN4kCZ\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b7e22225c325687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"292f74c92c97c686c723a291030cfa93","sha1":"ff7ce2a278d64bb71b8a15797fd10276ea6f0df2","sha256":"baf0572ea402de47c8c0c44f67fe0b4af40bd7bc06f5733bac13f51bb4ac4d08","sha512":"4f34b0d47baba42b1c93958d291540f76e16fb3f67405fec9d87d0d8d57bf4ae454b63e8462a3b238ff1f6306323f7af84e182781658961d0acac1e55b70d953","ssdeep":"","tlshash":"54c02b22dc04480f3d009fd1cb8af1c4c003dc3ce8315c00b867b544e9ac131c012548","first_seen":"2024-08-19T15:34:07.77924Z","last_seen":"2026-06-04T14:53:21.608366Z","times_seen":443,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/index_4.html","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://register-midnight.network/","date":"2026-01-02T23:46:00.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /index_4.html HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:00 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nLjq1jQGamSufyXtRpngWAJ4EqbLRe0XsUBGqON8gsxCpp7u24111YfnlTBUhcs9I0ELVJri%2BMpFdJGWvnA9DSStDg9hOvGLc3jtCgglXgxau%2Fo1mDWL\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b7e22227c365687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":142,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"292f74c92c97c686c723a291030cfa93","sha1":"ff7ce2a278d64bb71b8a15797fd10276ea6f0df2","sha256":"baf0572ea402de47c8c0c44f67fe0b4af40bd7bc06f5733bac13f51bb4ac4d08","sha512":"4f34b0d47baba42b1c93958d291540f76e16fb3f67405fec9d87d0d8d57bf4ae454b63e8462a3b238ff1f6306323f7af84e182781658961d0acac1e55b70d953","ssdeep":"","tlshash":"54c02b22dc04480f3d009fd1cb8af1c4c003dc3ce8315c00b867b544e9ac131c012548","first_seen":"2024-08-19T15:34:07.77924Z","last_seen":"2026-06-04T14:53:21.608366Z","times_seen":443,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/styles__ltr.css","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://register-midnight.network/index_8.html","date":"2026-01-02T23:46:00.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /styles__ltr.css HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/index_8.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:01 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\netag: W/\"694ef30b-7e0c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mu1rh4%2FAnVhL94Mqf59UWs86BO0L9F3bCqYztQ3d6DczHRtEwZQqG8wROVKzj01oCs5aOq450vexbMsnScBp9iostk%2BpKECjM49OqwDBFNtEq0IiduDC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e22240c555687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32268,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (32268), with no line terminators","md5":"a87a009e0813eb4f980736f6d0f161c2","sha1":"d9c76e2ddbb99b2db33779c7e83e552c45cfc94c","sha256":"eb067d593eb0fce05547d3cf5f3db7745db45028bc8767bc8657a2a15b666ad2","sha512":"d8004e4e0df8dc6b17c793f6ec65f3ebe82176d4e4b7452bc69a193e43865adc847c3fe5bd3ef22dac908cee7a8996e2554260278d4d0a2c848c9a3e202d6cdb","ssdeep":"384:+RcH72/ReA2yBOq+7N54PtSqxaG9eoc+cFs1gYDpLhvPTodVcVMcCCA9J8cEPc7:+75ebyBON54P5xAugYFrVFCC+JVEE7","tlshash":"20e2ca6378903b2af8279b6121d56efdf22cc913e5524fb9a646b630c3cf1994163b07","first_seen":"2026-01-02T23:46:29.890937Z","last_seen":"2026-02-14T07:25:46.766421Z","times_seen":4,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":299,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/index_9.html","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://register-midnight.network/index_8.html","date":"2026-01-02T23:46:00.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /index_9.html HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/index_8.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:01 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xCCpV%2FBWpyf5HIBaDIOuEwF%2F8usxwizR25iGfASo3of6Z7GPdGLkwDu5tyVFFc5o2d0gmVcCyrGQ55552mTKJI8w%2FHkbfVaoVdieTXpLRK04%2BO5n6NDL\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b7e22241c565687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"c0043baabdf16fca37148f72e8555ae9","sha1":"2ef15aa1adc09bde0d07b36592914e0db26fc7d8","sha256":"fb6571d56760d1c18a9634d89797d272311844e5b92b7fc71c6f8da6743bd392","sha512":"99d092b1f8481246875dfc2c2114e4b437e491f63812b438ee7fbf02a24223fe27223351c2fe05afbdfa95cd4579dfd98e5efb7eb946d08a15250affc52b23cf","ssdeep":"","tlshash":"bfc08c229800480e29009e91cb8ae1c4c402dc2ce8215c00b862a144a9a8121c012548","first_seen":"2024-07-19T02:09:55Z","last_seen":"2026-06-04T04:08:18.194382Z","times_seen":222,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/lottie-web-5.12.2.min.js","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://register-midnight.network/","date":"2026-01-02T23:46:00.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /lottie-web-5.12.2.min.js HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:00 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\netag: W/\"694ef30b-13185\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ca7%2BMnLIIcoabCts2MovjVsZjGJiLoW8OVsxi27vd%2FaW7Z7F2g3x86pUQJPtQO5k6GXTxEakzVGN%2B2TzUe6kkKAOsLERRulaiGwUlhBwFFr8P3suwb68\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e221f4c115687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78213,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d72c73307e5ad75fec53bacd5ef03c0e","sha1":"1ca7601ec82e8a7f91933a84394bdb978c4a69a4","sha256":"1d975319fcbde9da908d69ba0b0f755d8f9cb0206c39b260bc3b9962dcfab709","sha512":"2a794842d3eb971a4608f33a30a0e0b095b53f99f8d555502c4726b9cf4baf62dea6a5eecd3e24bad147a4177321623280273a0cb332be39dccbec698b5aaa9a","ssdeep":"1536:BF0D7TCKQyr4L0Ho080Dp7/2BshkxvhkOhf7QzaFVj:BFW5LBDGv17b7j","tlshash":"357385da580b85e98d1154ddc877ec0de06849639decf193ba2ceecab41df62c44327a","first_seen":"2026-01-02T23:46:29.892438Z","last_seen":"2026-01-02T23:46:29.892438Z","times_seen":1,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/98afca4347595731.css","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://register-midnight.network/","date":"2026-01-02T23:46:00.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /98afca4347595731.css HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:00 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\netag: W/\"694ef30b-24cb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2FlQ8mtnieVnAsAXmuHCt4nsbVCkJ%2FijDgfyH6Ef%2FBXJY%2BUTY%2BtVYzSO2Z7oRrPemvW%2FjXcgq7m0rBwN9nAGyME34QaP9%2BqBdRZL%2BVSxEC1Agbc0jqKu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e221f4c135687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9419,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9419), with no line terminators","md5":"9891160a9eb49829f2021d45fdcdad7f","sha1":"b178daf1891463aba085ad4fac5fd3bcc4e6b92d","sha256":"eb5efe1b6d857bcd8961e01ca6e948391eb7e22ba5d099d0c7e9a0cf6647dc0d","sha512":"8a12e4da157bfc9919e00c5065957f69ee16b4e729f48d3d9292f01f93d56560279071f0ccf9b0efd402e19162309c9e96765a60ad0fe30e6822de3823c3d509","ssdeep":"96:OJToi95dKSme+jeHoafQrAEyw0vArGZHp6ZIa+tYdI6JnYIJ/Ohr8:OJTXdKSme+jeHo0v2GZHcZ5DfufO","tlshash":"a41288986350281352134f3257b58bb4d9b448815bd3ce7f91c0bd88c6badbe236f6b9","first_seen":"2026-01-02T23:46:29.893191Z","last_seen":"2026-01-02T23:46:29.893191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/adsct.gif","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-midnight.network/","date":"2026-01-02T23:46:00.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /adsct.gif HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:00 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\netag: \"694ef30b-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lteMEuNiD7CfIztA8kXpb%2F9Z4OK1NzZ7KZwQRKde%2B7Rov6SAGMm6CkmUWv%2F8oRE9EfdcMzybm8HIZ8PAsjuIlHC3XUqULovQTMyV9bVQtGQ1iU%2FxIST5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b7e221f5c175687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-06-06T15:49:08.984163Z","times_seen":1100,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-midnight.network/index_6.html","fqdn":"register-midnight.network","domain":"register-midnight.network","tld":"network"},"ip":{"addr":"172.67.142.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://register-midnight.network/index_3.html","date":"2026-01-02T23:46:00.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-midnight.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:56:12 GMT","end":"Thu, 26 Mar 2026 20:53:54 GMT"},"fingerprint":{"sha1":"C8:10:DF:BA:CD:57:B1:CC:7A:A3:0A:E3:E2:19:78:74:DA:72:7E:69","sha256":"44:D9:5D:20:CC:9D:05:E3:BE:04:26:01:CE:99:A5:2C:4D:66:ED:5B:C3:68:C6:DA:00:96:AA:5E:1A:8F:BD:A6"}}},"request":{"raw":"GET /index_6.html HTTP/1.1\r\nHost: register-midnight.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-midnight.network/index_3.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 02 Jan 2026 23:46:01 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 20:41:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TkL1GaRc2fwlmWVdCJIyGfwmCjJeK0oXtAGj5lrWpI9M%2FysS8pLB0kuSIle6A8PK6zVDxypPrruT5n1tDQo2QZDVhS8k6SF6fr%2BBguiBJCfe9gFvFoZX\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b7e2223fc545687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":321,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"4dec981f1c0ecc6bcbb2ce484b9267ca","sha1":"1983bc4868850fce5effece656475137950d5cb3","sha256":"57e5fb9e91c5117e2acd069f23e748b45844bfce0cb0549520b53a55d57bb27f","sha512":"118e671bc24d284d12a78e9b6bbd9969258befb884e6bf2b2d7f10382530385d57b1f6e937e383cc44407c9129f47dcb5a3cda5b1bb7aa9fc2662c249627fcbb","ssdeep":"","tlshash":"e4e02d135620800a08a0a7e20bd2f2004007dc1a602389e8bdf2a88864d823b60223c8","first_seen":"2026-01-02T23:46:29.894145Z","last_seen":"2026-01-02T23:46:29.894145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"register-midnight.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}