{"report_id":"9aeaa61e-8ad9-41bc-9d7e-2303caa0d35b","version":6,"status":"done","tags":[],"date":"2026-03-28T00:00:22Z","url":{"schema":"https","addr":"governance-flyingtulip.com/","fqdn":"governance-flyingtulip.com","domain":"governance-flyingtulip.com","tld":"com"},"ip":{"addr":"104.21.27.213","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"governance-flyingtulip.com/","fqdn":"governance-flyingtulip.com","domain":"governance-flyingtulip.com","tld":"com"},"title":"Flying Tulip","dom":{"size":48284,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3799)","md5":"4830c165073e90a8c8eafe425a24b472","sha1":"5766839a7311258ead7a4537bd6150db57317948","sha256":"c94b0d861faab268f94abee40a20ec0478b01cf77143df9f4a364cd5466e5de9","sha512":"20b556a5a130b32c8bae477086a27196c21d34a8d3ac28b2472a998d04e30f091906fa20a5756db106b83c7941c4e422d01af84b84d40f18846c1be4f12dbc9f","ssdeep":"768:h0+8SuvFUZoy/LA2N/SnRm26SJGuk6yAMNqmB06PwypMuL9vzoC9:h0+8SQyZJ/HNqnRm2guk6yAMNqmB06PN","tlshash":"87231af873f00666890b87f0aab8456c6b36a1b3d6478c55f2dc06cb5f09ce98d53b48","dom_hash":"domhashb245494fcc0d8741a7c8ec3e73765960","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"governance-flyingtulip.com/","fqdn":"governance-flyingtulip.com","domain":"governance-flyingtulip.com","tld":"com"},"ip":{"addr":"104.21.27.213","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T00:00:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"governance-flyingtulip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"governance-flyingtulip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"governance-flyingtulip.com","ip":{"addr":"172.67.169.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-26","domain_rank":0,"first_seen":"2026-03-27T21:14:05.584826Z","last_seen":"2026-03-27T21:14:05.584826Z","alert_count":12,"request_count":6,"received_data":857691,"sent_data":2827,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"flyingtulip.com","ip":{"addr":"52.84.50.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-02-03","domain_rank":0,"first_seen":"2025-11-17T23:02:46.067633Z","last_seen":"2026-03-27T21:14:06.118522Z","alert_count":0,"request_count":1,"received_data":1746,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"webtrack.sale","ip":{"addr":"104.21.62.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-05T23:26:42.853157Z","last_seen":"2026-03-27T21:19:44.625158Z","alert_count":0,"request_count":1,"received_data":935,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"governance-flyingtulip.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"governance-flyingtulip.com","domain":"governance-flyingtulip.com","tld":"com"},"ip":{"addr":"172.67.169.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-23T18:12:02.87932Z","times_seen":311181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"governance-flyingtulip.com/","fqdn":"governance-flyingtulip.com","domain":"governance-flyingtulip.com","tld":"com"},"ip":{"addr":"172.67.169.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5b767c078c6813816231552aca1d562","sha1":"34f99579b527c24b3a5af82abb42079a0d3e1a51","sha256":"c17d50bae5a02a35e0ae5d0005c694495952f093629bb5193c668070161b0f7a","sha512":"7b4aed1d33c4891894a556505047a8f7afd72efc1c30c064b5a428fac50a5475e895f3937869de6d047128910d762069084c41d12fbacecffd43cd98e84b2e48","ssdeep":"","tlshash":"70c0125d7010696614ce687d4ccf088ebe368812a20809c999dcd4547bb1e6c42e484c","size":185,"data":"","first_seen":"2024-04-08T19:47:46Z","last_seen":"2026-04-23T00:37:42.858333Z","times_seen":622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"governance-flyingtulip.com/","fqdn":"governance-flyingtulip.com","domain":"governance-flyingtulip.com","tld":"com"},"ip":{"addr":"172.67.169.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-04-23T00:37:42.858814Z","times_seen":1254,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"governance-flyingtulip.com/ingress_dark.webp","fqdn":"governance-flyingtulip.com","domain":"governance-flyingtulip.com","tld":"com"},"ip":{"addr":"172.67.169.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://governance-flyingtulip.com/","date":"2026-03-27T23:59:59.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"governance-flyingtulip.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 12:54:48 GMT","end":"Thu, 28 May 2026 12:54:47 GMT"},"fingerprint":{"sha1":"3B:75:50:DC:4E:80:5F:79:1F:80:1C:96:87:48:8C:8A:E2:80:9D:08","sha256":"41:92:E4:61:80:80:85:D1:0F:DD:9E:3F:CE:32:3D:60:74:11:5D:EA:E8:EE:78:9C:08:14:47:A8:57:27:2B:23"}}},"request":{"raw":"GET /ingress_dark.webp HTTP/1.1\r\nHost: governance-flyingtulip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://governance-flyingtulip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/webp\r\netag: \"973629169d5270ad7a1b6ec6514312be\"\r\nlast-modified: Fri, 27 Feb 2026 14:11:38 GMT\r\ndate: Fri, 27 Mar 2026 23:59:59 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mIcQLNqPooYY5vtkR130CF%2FywYP1%2FbPwLGFcStKKZAOL468aaq9Leg8xwKwR1cnCIGRkDrtZW%2Bmn1jJA%2BZy3F5OTd7t30BbRlzJKwQ5hh%2Btk3ryfTi12ZB8qS02sCuTzo2o0FVZsWC%2BsQXvFfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e325a1ccb9a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":602268,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"973629169d5270ad7a1b6ec6514312be","sha1":"6c7642e280cd8a78e75bc6ced9b1583516150eea","sha256":"535bd6f91911cc2dbeb30e19081bb8a53229d8c3ff628748cf2909b7522d51cb","sha512":"8c051f1410399827c53ab259c7b59c03bb65eeb2c156b832fa8c415d61b672c97a8b9cb273820876a6bd70c249b8e017f13c776cd2ac23701782f741021ebd53","ssdeep":"12288:tEyxzce5FmnzMjBU3bDHVfdWSWU8XDb4bA7g17TpgIaQNe0S9lv:frmnzMj2RlV8XfB7q7NgxVj","tlshash":"dbd4237a4e654d9bf227cb7235224b30d62ac2f01a81e6abc72e58038a464d3e545f7d","first_seen":"2026-02-01T10:32:58.369429Z","last_seen":"2026-03-28T00:00:23.826486Z","times_seen":4,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":350,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"governance-flyingtulip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"governance-flyingtulip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flyingtulip.com/icon.svg","fqdn":"flyingtulip.com","domain":"flyingtulip.com","tld":"com"},"ip":{"addr":"52.84.50.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://governance-flyingtulip.com/","date":"2026-03-28T00:00:01.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flyingtulip.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 06 Feb 2026 00:00:00 GMT","end":"Sun, 07 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"22:D2:93:D7:E3:A6:4E:34:D0:30:80:D4:07:6A:A8:BA:43:2F:5E:AC","sha256":"C8:5A:FF:AB:15:CC:37:C5:C5:78:0D:42:2F:0A:B8:4E:77:47:9A:44:B3:30:FA:3C:A0:58:BC:4F:15:18:36:77"}}},"request":{"raw":"GET /icon.svg HTTP/1.1\r\nHost: flyingtulip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://governance-flyingtulip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 24 Mar 2026 13:01:24 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\ndate: Fri, 27 Mar 2026 05:14:11 GMT\r\netag: W/\"5a5d1771021765d93186a03dce4a72c7\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5f042aad530968241af9b660cec6b106.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: IODIwNX3Ye3SIzsHj_F5BBUk8XYCaw4gtaCLgobdnbABdx5j6S-QTQ==\r\nage: 67551\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1282,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a5d1771021765d93186a03dce4a72c7","sha1":"7b7a31a07ddb5114151a9d741517820595d3e7c6","sha256":"95e3189496d4be9460aa52c6452c1ffa318ba377d1681631ed1d9cbe088b00a4","sha512":"378f0282a0c862cc69d0341d71bc198ea718091544c0ce04bebc83c14f60c29b19e0f42653a19d5683eecba2792e98cf68815a6a363cb46fdc7f3ddf43b587bf","ssdeep":"","tlshash":"3f2165dfa1d4ebe0d40f5ba4ed275d3463aeb8fdbf8851e580906c00e5212e5294cdc6","first_seen":"2025-11-17T23:02:52.967639Z","last_seen":"2026-03-28T00:00:23.827027Z","times_seen":8,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":30,"connect":2,"send":0,"wait":66,"receive":0,"ssl":532},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"governance-flyingtulip.com/","fqdn":"governance-flyingtulip.com","domain":"governance-flyingtulip.com","tld":"com"},"ip":{"addr":"172.67.169.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T23:59:57.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"governance-flyingtulip.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 12:54:48 GMT","end":"Thu, 28 May 2026 12:54:47 GMT"},"fingerprint":{"sha1":"3B:75:50:DC:4E:80:5F:79:1F:80:1C:96:87:48:8C:8A:E2:80:9D:08","sha256":"41:92:E4:61:80:80:85:D1:0F:DD:9E:3F:CE:32:3D:60:74:11:5D:EA:E8:EE:78:9C:08:14:47:A8:57:27:2B:23"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: governance-flyingtulip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:59:58 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ssjzU4tH09pk1ivYXMboY04%2BXPs%2FgcycFg%2F2vDyI7rTTtpfhC%2FP2tlwodp8pFbIwklGdgpltjhB9lKyBIdfY%2FqqSfXwBONDgqtK3yWknnu%2FEYHGzhd%2BWzw1Lf8GE%2F3%2FGe8zVX0FhyvzofD9DA%3D%3D\"}]}\r\nlast-modified: Fri, 27 Feb 2026 14:11:38 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e325a131b901525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52834,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3795)","md5":"9bedbe2e2d11084df0ba7b560de970da","sha1":"f92d8c76005ecfa95c3c6c0c4555b09e1996cf01","sha256":"bde9eaec5314994e05200a7ecec3c1e831b90db88d1c9887f7db9134ed991a4e","sha512":"83f61e41b2d3df140b50aefd700c2adc92e36c584359bb07a933456af0e3c03a6aee9997965167a946e4a2a94f2fca6191a1a7451fb926a37c0caa67f9be0c6e","ssdeep":"1536:U++8Suy3J/SWNMnNm2Y4wI0OEDjksPASbDvzoC5:byYjm28","tlshash":"e53319e873b006b6980f87f0aab9555cab26a1b3d6578c15f2dc46cb5f09cd8cc43b48","first_seen":"2026-03-28T00:00:23.827534Z","last_seen":"2026-03-28T00:00:23.827534Z","times_seen":1,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":69,"dns":52,"connect":5,"send":0,"wait":259,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"governance-flyingtulip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"governance-flyingtulip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"governance-flyingtulip.com/a6c45bd52b50b587.css","fqdn":"governance-flyingtulip.com","domain":"governance-flyingtulip.com","tld":"com"},"ip":{"addr":"172.67.169.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://governance-flyingtulip.com/","date":"2026-03-27T23:59:58.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"governance-flyingtulip.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 12:54:48 GMT","end":"Thu, 28 May 2026 12:54:47 GMT"},"fingerprint":{"sha1":"3B:75:50:DC:4E:80:5F:79:1F:80:1C:96:87:48:8C:8A:E2:80:9D:08","sha256":"41:92:E4:61:80:80:85:D1:0F:DD:9E:3F:CE:32:3D:60:74:11:5D:EA:E8:EE:78:9C:08:14:47:A8:57:27:2B:23"}}},"request":{"raw":"GET /a6c45bd52b50b587.css HTTP/1.1\r\nHost: governance-flyingtulip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://governance-flyingtulip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p8NM7bfsnlrvvoOhxP1dKFAeS3Hw2wjvY6q3LnoK6JzFF8q1nwxXZSh7t534iEZclvJ0vkCRAac3Qv87fuhkzLu6MSEM8bsJa3jl9TluAOLXK1x4H47P2Tri3GXe%2BmFyj%2Fw55elWXcz4y%2BfapA%3D%3D\"}]}\r\nlast-modified: Fri, 27 Feb 2026 14:11:38 GMT\r\ndate: Fri, 27 Mar 2026 23:59:58 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"cd6383c8f399aa4a1e3e71dd59b72acf\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e325a161abb1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":169934,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cd6383c8f399aa4a1e3e71dd59b72acf","sha1":"b9e3dc229669c422bdcf82bd66b5870a6b50bbcd","sha256":"fbf77697a4fdb9aa1f68c60e4d5b765bd92c073de38b1277e5a680ea2197cefd","sha512":"9734751d951cdddbf4932ddcebde5d5c44b7066560e242dddf855f3effcf6a5d126565268a40b55b56f1b390229b88034756f5fec1cf0a9c58afbdcf8b65bc2b","ssdeep":"1536:iUAQNlurjjB8AZkGFEmJzIygQG0u2EDU3N6IBDpQ9aLZ16ESy2fi88EMNiC8i:X2B8AZkGRzIygQy2EDU3N6IBDpQY","tlshash":"5ff364eceb23c23f5d1f69fe936ca66ca12874869e121fd6f704900525cbaf30d91529","first_seen":"2026-03-27T21:14:09.591342Z","last_seen":"2026-03-28T00:00:23.828406Z","times_seen":3,"resource_available":false,"data":null}},"time_used":998,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":805,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"governance-flyingtulip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"governance-flyingtulip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrack.sale/p/62gzAzvto","fqdn":"webtrack.sale","domain":"webtrack.sale","tld":"sale"},"ip":{"addr":"104.21.62.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://governance-flyingtulip.com/","date":"2026-03-27T23:59:58.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webtrack.sale","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 18:10:06 GMT","end":"Wed, 29 Apr 2026 19:08:34 GMT"},"fingerprint":{"sha1":"8E:FC:0A:E5:97:B2:4E:A3:87:2E:8E:9A:B4:5D:E0:A3:61:5D:10:69","sha256":"7F:7F:F1:87:6D:42:3D:55:EC:EB:05:40:49:36:73:C5:D8:69:AF:D1:A1:DD:0D:FA:2F:D5:C1:16:B3:0A:E9:18"}}},"request":{"raw":"GET /p/62gzAzvto HTTP/1.1\r\nHost: webtrack.sale\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://governance-flyingtulip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:59:58 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nvary: Accept-Encoding, rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-dns-prefetch-control: on\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8YriKcBhfD5Hn%2FEuIXBbYj0cfvZO1SbJdS5%2FEhlfA38iI9%2FRJL%2FIEN6QL79Wk87op7kSq6PjIWW%2B2SRznqXMFU%2B52bBuGyVECUDHCopDmgEXQK7SJdKJp92EP851R%2BfF\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e325a1678f08be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-04-23T18:18:30.216673Z","times_seen":79318,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":49,"dns":29,"connect":1,"send":0,"wait":130,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"governance-flyingtulip.com/icon.svg","fqdn":"governance-flyingtulip.com","domain":"governance-flyingtulip.com","tld":"com"},"ip":{"addr":"172.67.169.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://governance-flyingtulip.com/","date":"2026-03-28T00:00:01.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"governance-flyingtulip.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 12:54:48 GMT","end":"Thu, 28 May 2026 12:54:47 GMT"},"fingerprint":{"sha1":"3B:75:50:DC:4E:80:5F:79:1F:80:1C:96:87:48:8C:8A:E2:80:9D:08","sha256":"41:92:E4:61:80:80:85:D1:0F:DD:9E:3F:CE:32:3D:60:74:11:5D:EA:E8:EE:78:9C:08:14:47:A8:57:27:2B:23"}}},"request":{"raw":"GET /icon.svg HTTP/1.1\r\nHost: governance-flyingtulip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://governance-flyingtulip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 27 Feb 2026 14:11:38 GMT\r\ndate: Sat, 28 Mar 2026 00:00:01 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"5a5d1771021765d93186a03dce4a72c7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OZL33NeyRXGXJtuFeJPOWpA2HVHW0H1xss7UIntF1kgsNAJXiJGqdjH4RF8xkNgAubwefVmEHJkoNJkyijVu3xZmH%2FSz%2BgUl%2FEHx3dy4uR%2F4Kjbuoqe78NfuAaaH6dIR2BIK4Hsz%2BP30vFQa3Q%3D%3D\"}]}\r\ncf-ray: 9e325a277cc81a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1282,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a5d1771021765d93186a03dce4a72c7","sha1":"7b7a31a07ddb5114151a9d741517820595d3e7c6","sha256":"95e3189496d4be9460aa52c6452c1ffa318ba377d1681631ed1d9cbe088b00a4","sha512":"378f0282a0c862cc69d0341d71bc198ea718091544c0ce04bebc83c14f60c29b19e0f42653a19d5683eecba2792e98cf68815a6a363cb46fdc7f3ddf43b587bf","ssdeep":"","tlshash":"3f2165dfa1d4ebe0d40f5ba4ed275d3463aeb8fdbf8851e580906c00e5212e5294cdc6","first_seen":"2025-11-17T23:02:52.967639Z","last_seen":"2026-03-28T00:00:23.827027Z","times_seen":8,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"governance-flyingtulip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"governance-flyingtulip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"governance-flyingtulip.com/9f1e17530f34d0fe.css","fqdn":"governance-flyingtulip.com","domain":"governance-flyingtulip.com","tld":"com"},"ip":{"addr":"172.67.169.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://governance-flyingtulip.com/","date":"2026-03-27T23:59:58.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"governance-flyingtulip.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 12:54:48 GMT","end":"Thu, 28 May 2026 12:54:47 GMT"},"fingerprint":{"sha1":"3B:75:50:DC:4E:80:5F:79:1F:80:1C:96:87:48:8C:8A:E2:80:9D:08","sha256":"41:92:E4:61:80:80:85:D1:0F:DD:9E:3F:CE:32:3D:60:74:11:5D:EA:E8:EE:78:9C:08:14:47:A8:57:27:2B:23"}}},"request":{"raw":"GET /9f1e17530f34d0fe.css HTTP/1.1\r\nHost: governance-flyingtulip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://governance-flyingtulip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VQEoovgKdK%2BEXoq4TWH10M%2B8iPp8tk%2BzxwiQ3AgSLBNuZzfZnwLI2g6K9BDGUEABO%2BKl0Y7JXKaS1lJVPUtsbWYcVW3PTG4fc1aFjxgOMHDFPw1%2BbrNH%2B9U%2BVk5EO0tFkpLkiz1wrS5ClgV5zg%3D%3D\"}]}\r\nlast-modified: Fri, 27 Feb 2026 14:11:38 GMT\r\ndate: Fri, 27 Mar 2026 23:59:59 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"b5291635394d7d3fa843fd1d5bda0f96\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e325a161abd1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25968,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (25967)","md5":"b5291635394d7d3fa843fd1d5bda0f96","sha1":"484a8ce9ea360dfb7bc48d8df793c8000ef1b446","sha256":"b1eb93c60e2dd26a3967c6d2899a513a5bd74921641bebdad5609c48bafad55f","sha512":"94d83258709d784a7993cdf95bcd9991212d00d0d25525fa80d057ef955f2949551a0b35f6b45d51f7eec769981de517dde56fdbd9ac471fdd377ef134e8f213","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB41:CMJihoCcZCOud8G8tKS65wqsZCG+dM2b","tlshash":"09c25d5a7a4cd100bf831b47629f2e0859347588e5301989be3f35ca2cd5ce6b973fa9","first_seen":"2025-08-22T13:10:50.808166Z","last_seen":"2026-03-28T00:00:23.82942Z","times_seen":103,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":726,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"governance-flyingtulip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"governance-flyingtulip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"governance-flyingtulip.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"governance-flyingtulip.com","domain":"governance-flyingtulip.com","tld":"com"},"ip":{"addr":"172.67.169.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://governance-flyingtulip.com/","date":"2026-03-27T23:59:58.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"governance-flyingtulip.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 12:54:48 GMT","end":"Thu, 28 May 2026 12:54:47 GMT"},"fingerprint":{"sha1":"3B:75:50:DC:4E:80:5F:79:1F:80:1C:96:87:48:8C:8A:E2:80:9D:08","sha256":"41:92:E4:61:80:80:85:D1:0F:DD:9E:3F:CE:32:3D:60:74:11:5D:EA:E8:EE:78:9C:08:14:47:A8:57:27:2B:23"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: governance-flyingtulip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://governance-flyingtulip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 28 Mar 2026 00:47:58 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=la%2BtmZfWhuKukHXSxlHi7RQJUutTVGn3WQI6jmyY3vsynAg5XrGZfICTZH9xSBGidgDjQ3C6Jtt4ngM4MJxmag6p8Ai5F4E9K%2BJuBLfy6L7SIWm575%2FxDs%2BLB8LrlssNuzvnvCi20Fki0l0FKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:59:58 GMT\r\ncf-ray: 9e325a167ac61a30-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-23T18:12:02.87932Z","times_seen":311181,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"governance-flyingtulip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"governance-flyingtulip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}