{"report_id":"9a7380c7-502d-4066-bc67-a28947575ce4","version":0,"status":"done","tags":[],"date":"2026-09-25T05:49:16Z","url":{"schema":"http","addr":"scanana.cc/","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":0,"asn":174,"as":"Cogent Communications, LLC","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"scanana.cc/","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"title":"Scanana - AI Crypto Portfolio Tracker","dom":{"size":75250,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (473)","md5":"dc41ac735b88b7776d99d84e3a3c0614","sha1":"394ed5aab43c3efd6dc68cbcb8d787ac1ae211cd","sha256":"c61233e5cef6cf863df28146467005bd1eeb743bfbff3483280024c98a46233a","sha512":"1593ec0587d3c2e2e4ba2b061d11dda24f1f390471a64e9022931f368577d8fd5ea88e8c9dde5aa8d7914f6abcc06aa9601bd1de25a590c208b419b56d4c5d66","ssdeep":"384:xI/ub3+2RLXdha7WIIIImer2kxEbZEUrd5aQ8IIIITntPKxaavVeewiOLc:xGuj+AXHIIIImDq28IIIITntGahVc","tlshash":"4573107055fa2633829381ca6b652b7b2fe5f553d94a01157aed0bd04fdbc83ec2b128","dom_hash":"domhash0347de5c1acf71a2ca7d09ad61614bce","first_seen":"2026-09-25T05:49:25.313994Z","last_seen":"2026-09-25T05:49:25.313994Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"scanana.cc/","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":0,"asn":174,"as":"Cogent Communications, LLC","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T05:49:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":18373,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":5,"received_data":246725,"sent_data":2845,"comment":"","tags":null,"fingerprints":null},{"fqdn":"scanana.cc","ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":24,"request_count":24,"received_data":5566840,"sent_data":11998,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"scanana.cc/","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d4fd5f76dbd56e22c042b72b464d8f7","sha1":"925af3c4b355ae357dd6052c478ffa0e8e9d61f8","sha256":"747bbd5b0d7d017752162b92306b53fe18a66414647e1fd1eca3ce4333986964","sha512":"44a06183055ec459a230e2619e9a86f47d9d3f78813ff4eceb3de4e3b6028bda615872e2f3e0cdf4b3d7221b4051e780d67eb08cf6e9e0364930fed301bbb8f7","ssdeep":"","tlshash":"2ac08caa288a0120819b24bfb5ad43a03a72c44230a926a73dae82185f61ed10311fc9","size":191,"data":"","first_seen":"2026-09-04T23:27:08.163364Z","last_seen":"2026-09-25T05:49:58.677765Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e2c7ed8cdd14bf85b0d8e5320b85b33","sha1":"dcbff6624243352f7c9be6d2747b18fc3dca1149","sha256":"6ba3cd5f25e13ae3c7fb9e1f23e268ba8fce82e2ae92ffa03fa8c699bb3263c8","sha512":"808d58ecebb841e3e6919ff18643ba842177e1ab484a9f7dbee25cae2b44db9c9cdd72df26bf17e035e2540625aef2b48524eae4dd2171817a47dc7bb8b503c2","ssdeep":"","tlshash":"2ac01280e5754f74091804ae15744a86395425795693a08a85eece4ae53ce4c5e58915","size":181,"data":"","first_seen":"2026-09-25T05:49:25.349299Z","last_seen":"2026-09-25T05:49:58.678587Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/script.js?v=20260910b","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"e47607873b28b11aa34ac8773dfd4412","sha1":"3a796beb6fe84d3e66ef28968390453c994a92a0","sha256":"061c33a85385b7f162eb0e05ca6298f8a8f8adbb896938b2e951b24fd77fdf69","sha512":"b70b9fcf50534d66ab3ac99a543c36e205428bab1af9567fc00bfa38b9063a7f5341f32f5c7033acadf9ea33e1025b106b891af86b5fa2aa796b2756b9996748","ssdeep":"384:tICQHlLcUlz3pKm37DG0IYP1cAfdNp953t8nh:tICwnoAfdN3RI","tlshash":"ecc2712a32f7103146b775bb83ab57c9363200473549ce553e9e8b441fd0ba4aab3bd9","size":26768,"data":"","first_seen":"2026-09-25T05:49:25.318239Z","last_seen":"2026-09-25T05:49:58.673715Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/zmJkimvn.php?s=%2Fipfs%2FmA1DAbS-s8d2Ff2JF_EqKA3507c228106a25bdc70531cc39f6f4ef%3Ft%3D1790315324027","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f33b88cb11524ba44596054e937d9b90","sha1":"031ff9c4c46385c0a71442fb5a58f600b269080a","sha256":"6361b1580a926a58e885089a581d5195950784f72a45e2cbd6abf3d3153dedcf","sha512":"b0008085de63bfdc6c916dd243b73e9f36490e3e2d6f426dfa09c4a9c5687fd2d1f15b6f1c10a8655c7b02790447a31351e1a4fac2d0b3960379068933ecf8b2","ssdeep":"6144:ch5gDJrq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:cs5q9NWCEiox3Ti/ESVPHSyyA","tlshash":"78d4cbd0b34a56bbd8d6b2b7043349afdfa82906064b188bd2e7dce4725470791dc9bc","size":645580,"data":"","first_seen":"2026-09-25T05:49:25.344729Z","last_seen":"2026-09-25T05:49:25.344729Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"🍌 Scanana AI - Crypto Portfolio Scanner","filename":"https://scanana.cc/script.js?v=20260910b","line_number":627,"column_number":9},{"level":"log","text":"Visit notification sent:true","filename":"https://scanana.cc/script.js?v=20260910b","line_number":118,"column_number":21}]},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:43.787Z","timestamp":1790315323787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 25 Sep 2026 05:48:43 GMT\r\ndate: Fri, 25 Sep 2026 05:48:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17689,"size_decoded":1563,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"30e76aaeae29f594433bc728a08b4d8f","sha1":"ac1b677b4d702295e7802802376ddd8c84acbc13","sha256":"395e51e3dc84faf99710da8cf316e573703addd6eb598e1b334eff76653e820d","sha512":"93b1661d34210abbdb2c6cca46bb229254b615ba07c05dbcadb65199b9d1e61e18dbb4302236e89188ddc34be20528f503f6140358f82385b1f0e621f93ec4d8","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kV:8KYXuM0p2+g7GQK","tlshash":"b1828892002ba400ab971dc233cf7f3aaece10896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T05:09:40.151737Z","last_seen":"2026-09-26T10:03:28.243202Z","times_seen":6021,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":36,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:44.081Z","timestamp":1790315324081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://scanana.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 309208\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-26T13:46:12.167123Z","times_seen":298162,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":43,"send":0,"wait":31,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/script.js?v=20260910b","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:43.790Z","timestamp":1790315323790,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /script.js?v=20260910b HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 17 Sep 2026 01:29:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aab426b-68d2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26834,"size_decoded":7069,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"e47607873b28b11aa34ac8773dfd4412","sha1":"3a796beb6fe84d3e66ef28968390453c994a92a0","sha256":"061c33a85385b7f162eb0e05ca6298f8a8f8adbb896938b2e951b24fd77fdf69","sha512":"b70b9fcf50534d66ab3ac99a543c36e205428bab1af9567fc00bfa38b9063a7f5341f32f5c7033acadf9ea33e1025b106b891af86b5fa2aa796b2756b9996748","ssdeep":"384:tICQHlLcUlz3pKm37DG0IYP1cAfdNp953t8nh:tICwnoAfdN3RI","tlshash":"ecc2712a32f7103146b775bb83ab57c9363200473549ce553e9e8b441fd0ba4aab3bd9","first_seen":"2026-09-25T05:49:25.318239Z","last_seen":"2026-09-25T05:49:58.673715Z","times_seen":2,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:44.091Z","timestamp":1790315324091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://scanana.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 309208\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-26T13:46:12.167123Z","times_seen":298162,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":33,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/screen/2.webp?v=20260910","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:44.097Z","timestamp":1790315324097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /screen/2.webp?v=20260910 HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 242478\r\nlast-modified: Thu, 17 Sep 2026 01:28:58 GMT\r\netag: \"6aab425a-3b32e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":242478,"size_decoded":242827,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1485x1059, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"781f179c015a7f9a22fb76672fd47e39","sha1":"0a425af0462f71f7dcca5d5ce9595086a87a9cb8","sha256":"640daa0a258e17eab0be9e1bdb8abfa9d5fbcda4a7b70d8adaa2f436b1a44153","sha512":"70731fd227f96732f6d6aac03eaad4716db95688560f84073e28a1e5d34c1f5cab5333d7ed11fef56f5255f78f4951395e5c03087b013c7104131db1b1aba87b","ssdeep":"6144:0AF70YNrIyOb82iqp5pDxHTc9AOYAkFk520hcaE/ktk:B19H+ieplzcaxJ2G/Yk","tlshash":"c5342338a687364588e08fe2fad4f97584d0504bff9368007caad95f98b37475b43a5c","first_seen":"2026-09-25T05:49:25.320402Z","last_seen":"2026-09-25T05:49:58.662392Z","times_seen":2,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":434,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/apple-touch-icon.png","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:44.878Z","timestamp":1790315324878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 17 Sep 2026 00:13:33 GMT\r\netag: W/\"b52-65ba2a7875881\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2898,"size_decoded":1633,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-09-26T12:42:15.016983Z","times_seen":7932,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/zmJkimvn.php?s=%2Fjmpd%2F","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:45.351Z","timestamp":1790315325351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"POST /zmJkimvn.php?s=%2Fjmpd%2F HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://scanana.cc/\r\ncontent-type: application/json\r\nContent-Length: 1266\r\nOrigin: https://scanana.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1266,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBzQLgAisADAD1AuwCEwAGAxEAAAIBMQMAAO8nhn2XtsKCARXPs7gruZfNtgC5PoQCAAC4X9JATtR3JWE6E8-pp-9X8pq7_8N09Pjug9POI6xr_foKgyLkdndW4SDRRt2kUCClXzLcNEsjul3hzi44eU-8FeiBcOuP2xP76OU9GlftHxSbK8HY9froBzlmCfmcYHCA13VEFTeabKlPUvdU28h-jCpED1I9c3t6qtSFBTICiiHsytcHvzzI9jF32MbUBuaFOjx5zrsZ9nDQ6WRnY8q3tFhkZX5m6HCmQYLvMo10hf2z7q1ONjISH8ZRElWKrPzZN4Bvp6YQS5Bkuu5jJphiv8hSgYSTO4IqHTzXsXk-ixSdLvTy4iZVP8ylZzs9JgJ6NyduYmJvfoJK-nn0Ivh6bEyik098Z7egnmZQWh1xPFkj3QdvWMsFMqk_pVEAhqcbXPf3X6zokWTsdnWvH5mC2P0BFrI45cBHKdef01gBNFMykbA_-sEolk63EyWkIOI23GrM0rNHVTNOby3FPg5GqoLcacf0AHRmJbmNtNH202AywaSWeezXulYiV3b1SYkGcLXOGNWgIYnQ4O7_rRvU8-7Mvg4ldy_r_gEx0_MlVcpguHKFrA1NTh0Dh23ArZOONmv1Rwi1U_-DFKGmnG4bYOHX1UvxqH-OkK40JqNkeYsFEwW2qSbt7rl0qAxAFo0j-igXqKlw5yZ92wpq0SsJry-F_YB0gKcbMleG4S1yMikddMBz3kYMdBmvL7zjX-tsDuWpxsQx7M3kfvufrEKYmUdFPk9BlAk_sTLzM4Mx8LgOF6LwUGQGVAYffDg1CEA7KKZCC3mNqyjLTCjRwmv7QREodb1gB3gCroFyqSAg5TjrjD-PpZUUB8cLs7FeXiS40rO8JEPWV0ah-cCDzgLotYmQLIBSVNUkr-8vJ8BiGOZ0gkpXrXdfBeEuKZGNLDTLAhwqz2rpazuqgqOLCwHbKPlf0kVIcvVZzhsDoPbphJG4p3XYj0QSMiH-dXhztDTSnq8HEdGH4q8ct6U9NFYNgfL1eST_zyORxc8SDBmkY_qfogVP5R3T0kaisMC9d0t1HoEX7HLtmJ2Xk7Xeq07zFafGaLn60d1VFm3Q15G5llQouPt9kQQkBdd7vee3jtROe39foXInaSKGqybxecK27d7CwwdLYe0Q\",\"challenge\":null}"}},"response":{"raw":"HTTP/2 204 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:46 GMT\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":2074,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-26T13:46:40.165102Z","times_seen":18671674,"resource_available":true,"data":null}},"time_used":912,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":912,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/fon/fon.webp","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:44.046Z","timestamp":1790315324046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /fon/fon.webp HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/styles.css?v=20260910c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 176796\r\nlast-modified: Thu, 17 Sep 2026 01:28:24 GMT\r\netag: \"6aab4238-2b29c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":176796,"size_decoded":177145,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1672x941, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"93eb16469883372bda42dc9ab6e179dc","sha1":"95ca5d4a927fa444f93a5a466150fabd94360ac1","sha256":"d5983c548b8e8b1af7740131ce68b5edd066868cf997f9779edd6e322d4a63fa","sha512":"52adadf792a04f976d122c6afa4ecd23e0d4eb45a12f79a890cce3e092e498e7b94a23c29d429fd1fb3d6926416dbf8a489cc9c6db62473c492ba1cebf00076b","ssdeep":"3072:FtXf5dPGX7ln5Fu80pbEG4H/OL4TE61zv8n4wF5hhC30L2STsjoP4T47AvBhZHqC:7BpG7PFL1E61zv8vKkL2yoosZRp9lUsn","tlshash":"19041379e40dd26f320db1f5cb518b106eb45fe053a169271635fa4d2ef022b633d2a9","first_seen":"2026-08-31T08:28:37.198764Z","last_seen":"2026-09-25T05:49:58.656718Z","times_seen":5,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":284,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/screen/1.webp?v=20260910","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:44.096Z","timestamp":1790315324096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /screen/1.webp?v=20260910 HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 266882\r\nlast-modified: Thu, 17 Sep 2026 01:28:56 GMT\r\netag: \"6aab4258-41282\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":266882,"size_decoded":267231,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1483x1061, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8277f6a4c391ce78ab1d8ba8741f30a7","sha1":"9dfe59eb2fe31c24d779cdf99f38d087c516b947","sha256":"f6e1619f9a53518af7c2026992e75449d747c34903070d0e3cf436e597ea1494","sha512":"dcc12b2a8388132de3d133ac899c49ebdfa086d83a970ceb1324f5edfd4f74fd8439c476db6ba5f70b832d4156f3c0483a2233c028372af917d202f97523d592","ssdeep":"6144:l9HrJ/CmA8d61f97gy7jYe5UWpmxBR0ijX5alBHuDL2fqcUvQ3o:l5kx8dMa1WQDnEuiY","tlshash":"5e4423bbdb4ee167cc7a07ba4c908d286b84647beb0539cd29230d24a9ac0717fd5dc5","first_seen":"2026-09-25T05:49:25.325887Z","last_seen":"2026-09-25T05:49:58.652974Z","times_seen":2,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":329,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/screen/3.webp?v=20260910","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:44.098Z","timestamp":1790315324098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /screen/3.webp?v=20260910 HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 219408\r\nlast-modified: Thu, 17 Sep 2026 01:29:00 GMT\r\netag: \"6aab425c-35910\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":219408,"size_decoded":219757,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1717x916, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e23ec90836b6a6d7f4d3219648bc6c4d","sha1":"a9eda720a02b1ff9353304d6ded08e33eb09fd7e","sha256":"ebc0d2a7f426c9d1863b71d432d67b990c549b9a9be4c9c20a6f24a79b99cdd0","sha512":"10f62c9c9be533d2d64b2e96f615fc7fd4eb19f65372c76bc5a50e710b4bf50805b289637e1eb1d2749fb2ec81dba74c0d2ef203e40478c0ecf35e39b17bf653","ssdeep":"3072:PzdAg4q+9LZrJpEj2KQNv/RNk5KkIfLwxfKEUge5xCpiF3ojLuDxPa5bWKt:LdAgv4H0SXI5qfGZUbCcKLu9PoCM","tlshash":"3224235f4036c28dc334d1d15bb51fb95698e4cd2cc320a2d43fdb692295c6a27ba68e","first_seen":"2026-09-25T05:49:25.328615Z","last_seen":"2026-09-25T05:49:58.672045Z","times_seen":2,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":435,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/notify-visit.php","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:49.009Z","timestamp":1790315329009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"POST /notify-visit.php HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://scanana.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:50 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19,"size_decoded":251,"mime_type":"application/json","magic":"JSON text data","md5":"4b8fad654a8638a9a21c5168cb17e981","sha1":"b966e9d6f4f93827bc3ec2f04e30718ccca756e9","sha256":"6853cb8b10133fef01f9e9960795ed93532dc61d4a23b8dcb73041f61565ff99","sha512":"5b6217332512320efe6321d90d0f98e07c92775586938c8c4af3ce26df1083ca188fe0989e74d83fc8dbdb16a641487ef06ca40de3ff0c9da94b471dea348610","ssdeep":"","tlshash":"65700003800000a2c000328002f82e2020800022c000000a800ca0088a30000308380e","first_seen":"2026-01-19T15:44:21.072623Z","last_seen":"2026-09-25T05:49:58.673066Z","times_seen":42,"resource_available":true,"data":null}},"time_used":1045,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1045,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T05:48:43.016Z","timestamp":1790315323016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 11540\r\nlast-modified: Thu, 17 Sep 2026 01:29:12 GMT\r\netag: \"11e91-65ba3b60d7e1d-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73361,"size_decoded":11885,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (467)","md5":"a7064ea4459ada1726d5465a8600d3d5","sha1":"98e3f634454ca467cb5f89df6aff464e646820d2","sha256":"0a50f1b675e4de482b3a50263e49dcd9502baf2571dcc771b4abcab5fd9fa995","sha512":"7d372a6e604bbfbbb40f7c929b19bb1ee4fd79ee4aafaebbd93b834a44ce1ec5a128e14615679ffd37ebd35cebaada586d91f57ede2df3c381d2fb8254b31a74","ssdeep":"384:rIdPsZz3mudXFwWIIIIAfJ2SzErAEscA5iQeIIIItTPKxsavVeewiELS:rWEZquTIIIIAwrYeIIIItTGshbS","tlshash":"cd630f7055fa2633829381da6b651b7b3fa5e643d64a01153aed0bd04fdbc83ec2b168","first_seen":"2026-09-25T05:49:25.330861Z","last_seen":"2026-09-25T05:49:58.665482Z","times_seen":2,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":24,"connect":109,"send":0,"wait":118,"receive":97,"ssl":120},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/styles.css?v=20260910c","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:43.785Z","timestamp":1790315323785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /styles.css?v=20260910c HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 01:29:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aab426a-29af3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170739,"size_decoded":28615,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"94d18ca322ee443d8af558772149ff8f","sha1":"2814e85fc021dd681f09c2ab2e3b10557ff8e3a7","sha256":"cb11598be0a0de64dfa3d69fdca27e6c73a35f21a225dfcacfafd2ae8ae629da","sha512":"d363bced128153066fb5a23d4d1c0a67f785539ff13a832d6800284d4f3a623fbc0a514c4fa73cd899a9bc4f3eae49183a37bae4bd70fc941da696a9194cc47b","ssdeep":"3072:cgsMYWOYkh5k2zUKMr/pPEyKx95rA5OqHZf+g:cgsMYWOYkh5k2zUKMrxKrA5OqHZf+g","tlshash":"c6f386565a931944b52be5a86ffb874ab32c9003840ecd6d7fcd314c8f493eda5a2b4c","first_seen":"2026-09-25T05:49:25.332344Z","last_seen":"2026-09-25T05:49:58.666628Z","times_seen":2,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/Logo/Alchemist%20AI.jpg","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:43.801Z","timestamp":1790315323801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /Logo/Alchemist%20AI.jpg HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16464\r\nlast-modified: Thu, 17 Sep 2026 01:28:27 GMT\r\netag: \"6aab423b-4050\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16464,"size_decoded":16811,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3","md5":"851f0e479c443128fa104dd9d2d577bb","sha1":"f7a5227b07a492700ce2109778127ac3245f6ba5","sha256":"6e9cd2be1f6f6d282984e25f59794ba4afdb6a2a7d683a97a2842e28ab479c73","sha512":"27c8a3ca7f48c8d6ca6ecef7caaa935d4657cefff6ea0e2f5e96dcd2bc3bf189484e929f67e3c5b03d04de670e99246d4f4b5ed43fe078367d0c4e5082855baa","ssdeep":"192:u5HTuBaj4xcEYATrpjRdKcQyX+OZ43QGwf8pVJ75iFAaMbCH8d7+XgTYh2CHr9OL:WMm4xFTrl2043Oq75ZOcd7o2CH8td/EA","tlshash":"9e72d0a723d61567eff3563b12400bed3a77b43d98fc4b1eb029a114d18d4f20a595e8","first_seen":"2026-01-19T15:44:21.073546Z","last_seen":"2026-09-25T05:49:58.675649Z","times_seen":78,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:44.083Z","timestamp":1790315324083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://scanana.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 309208\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-26T13:46:12.167123Z","times_seen":298162,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":66,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:44.089Z","timestamp":1790315324089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://scanana.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 309208\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-26T13:46:12.167123Z","times_seen":298162,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":45,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/screen/5.webp?v=20260910","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:44.099Z","timestamp":1790315324099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /screen/5.webp?v=20260910 HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 266078\r\nlast-modified: Thu, 17 Sep 2026 01:29:04 GMT\r\netag: \"6aab4260-40f5e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":266078,"size_decoded":266427,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1672x941, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"86c6ab5f0b04b6e4454437772d0f3beb","sha1":"981dd6beaac4b5adff1dc9eaa10256906a27d73c","sha256":"49688d0a07f997c0dbf065a6c3ceb9ad1a4457af6784f2f6a513a85fffa4adee","sha512":"4822df567a537d6b07042cce188df1c30dbb6dcac4ac6f75eb7cb31725a6458a99be780936882b62c3347f271e800cd8e7f5a3e0b3755fd3244bbbfda632d1a9","ssdeep":"6144:b873k43Q1IwdoAPiwEotcHHVYSafCc+MTPM/p2ho12kRJ4vS8:o4mQBapZnVYSiCc+IPM/0ho12VS8","tlshash":"0044235e1f08fba1add8b956fb29572c81053ec4695e4e61cb4b8cf44e78250cfe21e2","first_seen":"2026-09-25T05:49:25.33574Z","last_seen":"2026-09-25T05:49:58.676366Z","times_seen":2,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":440,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/k47acfl972l.4hkx4lc5.js","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:43.791Z","timestamp":1790315323791,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /k47acfl972l.4hkx4lc5.js HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 17 Sep 2026 00:13:33 GMT\r\netag: W/\"b52-65ba2a7875881\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2898,"size_decoded":1633,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-09-26T12:42:15.016983Z","times_seen":7932,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/Logo/Scanana.png","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:43.797Z","timestamp":1790315323797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /Logo/Scanana.png HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 936048\r\nlast-modified: Thu, 17 Sep 2026 01:28:45 GMT\r\netag: \"6aab424d-e4870\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":936048,"size_decoded":936396,"mime_type":"image/png","magic":"PNG image data, 1254 x 1254, 8-bit/color RGBA, non-interlaced","md5":"6bc9ab2466baa367fbb305be3633795d","sha1":"8af727a5aff9ad3620946c27c5e8beee697e85f6","sha256":"efd9f248f2a4026dc56046a5c6e226244ea3c02498a2a934e3b46812cfb91ada","sha512":"eb671ba8527911329dce98aeaed8e31dcb25d4b4912ba5963c9391e2094027d8949221ce5c8e40497035b8ac8b7e4114be8448dee96cbd7f33e33f1eaf662e70","ssdeep":"24576:4PVdVJUlSLX68dl+dybMInpEdB65qwGsf4Kw8hgTn:CVdVWEzvlrbMInpETGFPhqn","tlshash":"9e152374dcb5f4fdee7315721dea2fb5dce3069804aed5b4ec08096e015ae2a69212cc","first_seen":"2026-09-04T23:27:08.161548Z","last_seen":"2026-09-25T05:49:58.667749Z","times_seen":4,"resource_available":false,"data":null}},"time_used":973,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":760,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/Logo/scanana1.png","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:43.798Z","timestamp":1790315323798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /Logo/scanana1.png HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 113395\r\nlast-modified: Thu, 17 Sep 2026 01:28:47 GMT\r\netag: \"6aab424f-1baf3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113395,"size_decoded":113743,"mime_type":"image/png","magic":"PNG image data, 1074 x 255, 8-bit/color RGBA, non-interlaced","md5":"9c1d8ac313f9a598d21e5bcaae8a55a1","sha1":"7f183e72e488fd2799aa973f455f35f1f54ad933","sha256":"9695be0896f16b32aa4b1ef47bc14ee61e8ff9302253ba9333d6d988ce63af4b","sha512":"c6bb62927ee04d668c8ae2a25280456da1d7ce7b9a097f9a14e757e5a6d2dcacb97e7177fba00597bb0c755804cf1d6ee242a6bc0022c213932f8a9095d3552c","ssdeep":"1536:Zb2EipD5QSS8NqYiHOnUnpGYgjk8+IN+uvfMoEpUBPKw+A9HxpSHkU5Ny243xPqh:V2EoGxK6euoEuBP+I6FNyNxPq6J3W","tlshash":"0fb312657953e1e3cd5f34fe5a8d9d80a8f234692fe082b4b7661e4c20198e90ec9b49","first_seen":"2026-09-04T23:27:08.136045Z","last_seen":"2026-09-25T05:49:58.671219Z","times_seen":4,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":327,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/Logo/pipin.jpg","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:43.800Z","timestamp":1790315323800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /Logo/pipin.jpg HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9003\r\nlast-modified: Thu, 17 Sep 2026 01:28:38 GMT\r\netag: \"6aab4246-232b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9003,"size_decoded":9349,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3","md5":"fe599ea1d9553fddbcdb023372e36b68","sha1":"b2d17e86c12f655303042b6c6e2909fd20cd8b77","sha256":"fdad87dab824dc325fcee922e5b34fa269cc60dd27c8e3feccc03e79cb9fdf4e","sha512":"ad86f991f3cb85d14c841d370c6c2235caa46a64cb3a18a842f812b3baeea1f8dc5458dce978057ba8e29aa58614ff80d31f154ae846840a3203fa7d76a8f99b","ssdeep":"192:lgCe5fsV4azgFBY2CM/pBTIeGaHZAAJKRj3StPpznWa:laEV4VVCGBTd2jLSxZWa","tlshash":"b4029e1b6721468ed48083300a678d2b34f7fd73fad48f568e89e92cc2ba34dc606645","first_seen":"2026-01-19T15:44:21.061113Z","last_seen":"2026-09-25T05:49:58.66839Z","times_seen":77,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/Logo/vankedisi.jpg","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:43.804Z","timestamp":1790315323804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /Logo/vankedisi.jpg HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41797\r\nlast-modified: Thu, 17 Sep 2026 01:28:50 GMT\r\netag: \"6aab4252-a345\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41797,"size_decoded":42144,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3","md5":"93670e19bd42459df32cf304d29a1df9","sha1":"e6f94140e1ef76c9b2f0666ecc547fb6ca6ba07d","sha256":"e1d833f5b831f2055f2c17016c9c4f87f3c22908ca18c357f9a849ff0a8df37b","sha512":"218cc9003add1d55abacde316496f474b6cbdb2d393d1cbdade19b956ed833f7276861efff5d5a3699c8d7e47feac22ffc25a462e6fb297215965ad55ff63422","ssdeep":"768:IlnZMfu8sKyCLUuYbqDia01GZ/VQwXGwe6S2V0CKkxsOANWfdF:O4aasODiad+lwV5KNpNAF","tlshash":"6813f12ddb4dbba4c349c5b142b96779130aee5946aa68281e7f0aefd055db3c8000cf","first_seen":"2026-01-19T15:44:21.066734Z","last_seen":"2026-09-25T05:49:58.661649Z","times_seen":78,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":325,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/screen/4.webp?v=20260910","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:44.099Z","timestamp":1790315324099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /screen/4.webp?v=20260910 HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 220330\r\nlast-modified: Thu, 17 Sep 2026 01:29:02 GMT\r\netag: \"6aab425e-35caa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":220330,"size_decoded":220679,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1487x1058, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a31713f264d4117fad816cdc8e012146","sha1":"3c3fd16ae8b9af520aa2db0d351e586d1396fa77","sha256":"f65a24dd670cb9c3a0aebac0fda7aee99b01818f293cb48ae769fa11737cefe7","sha512":"d8348babe1045e84ba2c344a6e3bc21fb1fe7c73654c607f79f1fdc6133cbfc471d069167ca484510c3c5747f90c7fabbb1313ec425affd612c6961574c4d911","ssdeep":"3072:y3Br2699cNT+d7uYrgKR3RhiLQRgUh4ocVwJJ3NYvDwmLc8pkr86P8+HYHy+x:OrQid75sKhhiGgGlZBYvDFUrVwSQ","tlshash":"4324239f0a87d1fcfa2768ed1011b1c721e4522e4a3110b19a6b63b7cd71ec6cab585f","first_seen":"2026-09-25T05:49:25.340545Z","last_seen":"2026-09-25T05:49:58.664674Z","times_seen":2,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":435,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/Logo/QmXaRoMTAJ3PSgHkYrKgA9y6bvP5U9DBcvDmXTdvKsYPzY.jpg","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:43.802Z","timestamp":1790315323802,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /Logo/QmXaRoMTAJ3PSgHkYrKgA9y6bvP5U9DBcvDmXTdvKsYPzY.jpg HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 69340\r\nlast-modified: Thu, 17 Sep 2026 01:28:41 GMT\r\netag: \"6aab4249-10edc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69340,"size_decoded":69688,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3","md5":"aa1beaf36b085f6acf69f44e6ebb52a4","sha1":"e41cc2092471b6f47a75e604fe7d548bf2c4728d","sha256":"ecb9b78abdba3a289d7ccfcaf69aaa1b8d78eabf7d44c094e03fc06247e98db5","sha512":"43078056ccfb96f2950e465c94b8b714f7efca2d8f1d5d1fc8af0aad92aa6289247f708feb64845a53e4cb57624aa30c6ea76fa4eabc100d1a2f78d8d0da3bd3","ssdeep":"1536:JV0XdmiWXIhaswqsrutl7bHSuNmjYQ5Nz5t1QAyOtzDWkn44f89ahn:70XdmN4hfwjGxb3N61/z1QlMz4A4M","tlshash":"ac6312905697233cf1c4d27555e62ef6bedf11ee4206ab90fd48b62e870a0d22f6c5a0","first_seen":"2026-01-19T15:44:21.074456Z","last_seen":"2026-09-25T05:49:58.668994Z","times_seen":78,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":428,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/Logo/monet.png","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:43.803Z","timestamp":1790315323803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /Logo/monet.png HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1934198\r\nlast-modified: Thu, 17 Sep 2026 01:28:33 GMT\r\netag: \"6aab4241-1d8376\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1934198,"size_decoded":1934548,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"3e13d8ba91325ef30f05e5ce4819af08","sha1":"c03f076232b2a16e41156c12155cf67617ef68e3","sha256":"e884aa47452ab64688e21fac5e0e631035a52e8bedd89d3d4cec2d1ff656cc1e","sha512":"0790b8abde62368700e71df21540d5f398838dbe8204893dc83cb5317a4dc21fe6dd43964422106a8abeea826ac5a941efa258fc42f7760e1df1cadb99e24666","ssdeep":"24576:840VK2GPFI24caDe4IMXbjJmT2s3g/ESYRVXXw8PjEFxR+tPEI0:15I1rDDtJmTX3gmXXUFxR+p6","tlshash":"952523ea3fe251e7ed71d772ca3191892edb30937702c1902493993648e9f9d3b70a49","first_seen":"2026-09-25T05:49:25.342713Z","last_seen":"2026-09-25T05:49:58.654229Z","times_seen":2,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":555,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/Logo/QmaFy59TMnLb4jGgL6LpquyXSxTRXKR4mEfSobUSsPoR46.jpg","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:43.805Z","timestamp":1790315323805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /Logo/QmaFy59TMnLb4jGgL6LpquyXSxTRXKR4mEfSobUSsPoR46.jpg HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20182\r\nlast-modified: Thu, 17 Sep 2026 01:28:39 GMT\r\netag: \"6aab4247-4ed6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20182,"size_decoded":20529,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3","md5":"4d268a8e09836f47f9f5e09ca911ee29","sha1":"c254ef247bda885a4fe77e12be7d1fcea04f586c","sha256":"323efa4ae855bdd9447674f27abf03484746191d824cd5941de983f8b6884507","sha512":"938857c64397b55531a4961b57d63f1b52fafaaa78a206ed8ba5560003aeb8ddcbe87746c77dfd41e475cb38b57a9a49cc4106f1e3912e98b6457bf713b9d9f2","ssdeep":"384:9m+yx6Y2ep1PhpziESAgn26q38wI4vy/wcvvXKpfChTqGmKyWsnWioAm:YSjChpuESAg26qMwGBafI0nWb","tlshash":"4a92e09ba3ed9d7add624ff290ba022bb3f2548fee14c1c75c21105143ee8c7d4a9186","first_seen":"2026-01-19T15:44:21.070493Z","last_seen":"2026-09-25T05:49:58.655206Z","times_seen":78,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":326,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/zmJkimvn.php?s=%2Fipfs%2FmA1DAbS-s8d2Ff2JF_EqKA3507c228106a25bdc70531cc39f6f4ef%3Ft%3D1790315324027","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:44.028Z","timestamp":1790315324028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /zmJkimvn.php?s=%2Fipfs%2FmA1DAbS-s8d2Ff2JF_EqKA3507c228106a25bdc70531cc39f6f4ef%3Ft%3D1790315324027 HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":645580,"size_decoded":124001,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f33b88cb11524ba44596054e937d9b90","sha1":"031ff9c4c46385c0a71442fb5a58f600b269080a","sha256":"6361b1580a926a58e885089a581d5195950784f72a45e2cbd6abf3d3153dedcf","sha512":"b0008085de63bfdc6c916dd243b73e9f36490e3e2d6f426dfa09c4a9c5687fd2d1f15b6f1c10a8655c7b02790447a31351e1a4fac2d0b3960379068933ecf8b2","ssdeep":"6144:ch5gDJrq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:cs5q9NWCEiox3Ti/ESVPHSyyA","tlshash":"78d4cbd0b34a56bbd8d6b2b7043349afdfa82906064b188bd2e7dce4725470791dc9bc","first_seen":"2026-09-25T05:49:25.344729Z","last_seen":"2026-09-25T05:49:25.344729Z","times_seen":1,"resource_available":true,"data":null}},"time_used":882,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":882,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/favicon.ico","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:44.879Z","timestamp":1790315324879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:44 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Thu, 17 Sep 2026 01:29:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aab4270-10be\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":2433,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"2e1a20fb83891cec6f28e12d25889ef2","sha1":"f91e2a4c06c36c85a115b48ae4aefebd65f187e7","sha256":"268d96d6a0e6588d8b653c114c3a18c71eb93e9b18f630e493419ebefaed905a","sha512":"e7df33232cb7bb9efe3d6252fe6032ccae8b7b2ed25c51b71d08817a0165ee7e4174593ad29051d57a44d9a250dfd4c7436bf2f56916e4a5a4b28e1a6b387ee8","ssdeep":"48:QblysGOw1Aj/4LNoFAYTcgkrEX0z3qKPyUES0Kx95B3TPgoaIh+K8dnb56:Qblwy/qNoFhQy0z3xPR0KT7TI4+56","tlshash":"0a912aa1ed5a4ac4cc799e7568e82400876f3ee8ac245197d749f07349735743481c24","first_seen":"2025-12-22T07:05:49.896682Z","last_seen":"2026-09-25T05:49:58.663443Z","times_seen":83,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanana.cc/Logo/TROLL.png","fqdn":"scanana.cc","domain":"scanana.cc","tld":"cc"},"ip":{"addr":"170.75.167.55","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:43.799Z","timestamp":1790315323799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanana.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 00:34:07 GMT","end":"Wed, 16 Dec 2026 00:34:06 GMT"},"fingerprint":{"sha1":"02:FD:CC:81:D3:36:13:67:B4:58:A2:8C:C3:B6:35:9C:C7:81:5F:59","sha256":"AA:88:D6:11:79:B4:2D:8A:DC:EA:C3:D1:C8:9E:57:1F:97:81:0B:32:8E:DC:57:E5:AD:23:7D:23:EF:98:19:37"}}},"request":{"raw":"GET /Logo/TROLL.png HTTP/1.1\r\nHost: scanana.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scanana.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 25 Sep 2026 05:48:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 99715\r\nlast-modified: Thu, 17 Sep 2026 01:28:48 GMT\r\netag: \"6aab4250-18583\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":99715,"size_decoded":100062,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit colormap, non-interlaced","md5":"f800d63c6138209d03b151b2017a072c","sha1":"811b3147140044f94e145601e80fc701a4cbad39","sha256":"c92c176f7b220bee3114c93202bc9ad34569540f9083675ecd312dcc5e1253af","sha512":"f6260013c54e652525f96e292fc49f0345a11830c2829d26a5b2bd9dbae99742a16a3553f090b1ad7a3b4d57c13406a621dfc592a12c313da70effbc34a35ca4","ssdeep":"3072:FTDe57agXXDfEvH24Z6uKHHy7I5/7WJnx47:Fe57aezbA9KHHyUU67","tlshash":"fca3129c5da16a88cd71d2ffb19128df0bd79e20daff13432508aa37f716999c4189a0","first_seen":"2026-01-19T15:44:21.069338Z","last_seen":"2026-09-25T05:49:58.664074Z","times_seen":78,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":428,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"scanana.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://scanana.cc/","date":"2026-09-25T05:48:44.086Z","timestamp":1790315324086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://scanana.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 309208\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-26T13:46:12.167123Z","times_seen":298162,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":56,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}