{"report_id":"9d070808-c571-4d34-a482-5f4cb8e9b216","version":0,"status":"done","tags":[],"date":"2026-07-14T20:51:09Z","url":{"schema":"https","addr":"bonus-flarefdn.live/","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"ip":{"addr":"172.67.203.21","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bonus-flarefdn.live/","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"title":"Flare — FLR Rewards Vote","dom":{"size":6345,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (583)","md5":"847cc512b953a74e855b0adde3f33a54","sha1":"80787e91c927b8a2929f6bff92db562b95dfcfdc","sha256":"cab553ca1c3b24347c02687e6b4833adbf4aec638ace7664f74f3769345527f2","sha512":"df7de8022496b6e79d3eae9880770348360386bf1381ef61a6f28e79cbf8d1327d741cc9f5245ac63263a6d2b11255adbc91e8cafe77e3e0daba1c7446e38c72","ssdeep":"96:nYzRZfWSq1bSAt5pYuoEoF4uOjs0okZRG3Vfbj6hRCzI8cVc5J1r:YzRZeSkbdoEoF4uQDSFja0/r","tlshash":"35d166f1a19011a121c1f3de7533317a2495f8ebe6028042b2fe279d4be8ec6dddb549","dom_hash":"domhashe390fb8334fa73ec92c6cd30e16a8174","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bonus-flarefdn.live/","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"ip":{"addr":"172.67.203.21","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-18T20:51:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":11788,"sent_data":568,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bonus-flarefdn.live","ip":{"addr":"104.21.77.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-14T20:43:25.790565Z","last_seen":"2026-07-14T20:43:25.790565Z","alert_count":24,"request_count":8,"received_data":403303,"sent_data":6726,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":5,"received_data":4065,"sent_data":2806,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-07-12T23:34:29.320154Z","alert_count":0,"request_count":3,"received_data":832869,"sent_data":2168,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bonus-flarefdn.live/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a1b366afdacd56b9","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"ip":{"addr":"104.21.77.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"acc6ad58018170ee0d7b05b1752b9287","sha1":"68db880c70d5235a358cce4608f32dda7676a913","sha256":"15f863ceff7410cfdd2d35ea672b3d640d999e4dfea78f1343825bd3afb6b4ff","sha512":"9ebd3f780ec9fcef28ab244bf8a57a19d395a5120c89aa9e0d399557ec2d9d8a6875e81f7f7429d771c0bc0df8f7d35cc02d02be42a64bdb278afc84c84c5036","ssdeep":"3072:br3FEqv3CZxB2izW/2z2w6qlg/8TcO3k2tYZkCQE1/T:br3FEqv3wxBxzW/9w6qlgV2tLCQE1/T","tlshash":"6724e54ea99632372357527a086b319bb2ee2cc0046c390ce961b0d97f69bfdd12747d","size":221373,"data":"","first_seen":"2026-07-14T20:51:13.913622Z","last_seen":"2026-07-14T20:51:13.913622Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus-flarefdn.live/81167c89-a533-43d3-8c84-182a9a58eafe","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"ip":{"addr":"104.21.77.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"faca64ff68a3b23c989993ba31712c7c","sha1":"e3e481684b5cc9f5efc8a47bbb89d2a314cbd0fc","sha256":"c6d433cb9cca146961017b5fca02d393000737a9fc2db095ae7ce60899b21d0d","sha512":"e0e30f1ac14a810a0344772026e28eccfba994b0694201bc7d5b9fd5d693f04ffe29e833d6f40e13b371b3aef918f450270b5351c09c6d3cf5ad91366cf18b09","ssdeep":"","tlshash":"aed0cd093d71d60986a221337c7f3521c1616264650d53445335cef9cb506af2514f54","size":291,"data":"","first_seen":"2026-07-12T23:33:33.917473Z","last_seen":"2026-07-17T22:45:50.974457Z","times_seen":4423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus-flarefdn.live/","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"ip":{"addr":"104.21.77.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"31b6860d8adec9bc66a7de3cf5410428","sha1":"b75b67a8f828c1b8632289bb131db60478ff7569","sha256":"a5bf456b649291aadce0735984b3e9bc51a4f01e2868ba28f7d1a1b8df851203","sha512":"3b86fc21c7f538ddef6d76ca4a14ddcc2b54b1027fede1b489067201b4c3b077c2db38c181ee7bcbec6f195c59930a7fd79ad93350f64d6c0c596eb3b38151f3","ssdeep":"","tlshash":"39c02b883fc1e018c24221351c6f4286fa39df700c4c1043e042414ab9b072103def0f","size":137,"data":"","first_seen":"2026-07-12T23:33:33.887143Z","last_seen":"2026-07-17T22:45:51.00905Z","times_seen":4597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus-flarefdn.live/?__cf_chl_rt_tk=m_QjZY5KuBetej7Y1YAJYY76s1LYVm4M5NdgJni.WZQ-1784062241-1.0.1.1-2EVluEV7IFTGQ3_FRlTExLba_N2qWBfapxjcFS9Aerc","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"ip":{"addr":"104.21.77.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-17T22:37:08.721632Z","times_seen":777878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/45392e0f-5ea8-4635-a7ef-46a4340f2fbf","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"faca64ff68a3b23c989993ba31712c7c","sha1":"e3e481684b5cc9f5efc8a47bbb89d2a314cbd0fc","sha256":"c6d433cb9cca146961017b5fca02d393000737a9fc2db095ae7ce60899b21d0d","sha512":"e0e30f1ac14a810a0344772026e28eccfba994b0694201bc7d5b9fd5d693f04ffe29e833d6f40e13b371b3aef918f450270b5351c09c6d3cf5ad91366cf18b09","ssdeep":"","tlshash":"aed0cd093d71d60986a221337c7f3521c1616264650d53445335cef9cb506af2514f54","size":291,"data":"","first_seen":"2026-07-12T23:33:33.917473Z","last_seen":"2026-07-17T22:45:50.974457Z","times_seen":4423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/3104729c556c/api.js?onload=WBul8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"695698c613d35c433471c55525a0be78","sha1":"a4c5a51074996c0e6108c8e518bc871d5570745a","sha256":"5c5c445b67e1cb710a98338a2ee3631506a50351a355c9cbcf455c8fc48a21f6","sha512":"0340b6beb6180c0c059434884905597fddeaee363a7eb1ffe25847ef2da909747bb33d9ac598cb690c504de45697829966d7e3c9a5e21602b916af49d2fff1a5","ssdeep":"1536:tMAA+jXpq5RDMDpydrdopXOe1C05V4tMlsgV0Di0w58B:t1tYR0ydrMXOe1ldlP0Di0w58B","tlshash":"bd732bc472aa7862139ac0f4913b6753b3257d3aa84c8850d467dc653b7cd869233fbe","size":75049,"data":"","first_seen":"2026-07-12T22:51:46.413958Z","last_seen":"2026-07-17T22:45:50.935679Z","times_seen":8219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus-flarefdn.live/","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"ip":{"addr":"104.21.77.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c6a9ac45657e74621d89c0f54556765f","sha1":"0cde7495bdcff973aa0755912afb1c20077ab7e8","sha256":"59785c89ee1060250d274c963b4e1268496b8d5660f812bbf6106b54f6a6a032","sha512":"2134c5ad27cab233752fa73c1cb72db8f531f77e07a0014c5e9eeaa9763bd2b5b96de08af0dac6bd70f3e379450394a8016ddfae66c08f83d1ba4f820525097a","ssdeep":"3:N/BKL1XExL:eL1UJ","tlshash":"bb5504d0744135700410f400d15134375415050010170445f05d34d41f304040570544","size":1337359,"data":"","first_seen":"2026-07-14T20:51:13.923465Z","last_seen":"2026-07-14T20:51:13.923465Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"31b6860d8adec9bc66a7de3cf5410428","sha1":"b75b67a8f828c1b8632289bb131db60478ff7569","sha256":"a5bf456b649291aadce0735984b3e9bc51a4f01e2868ba28f7d1a1b8df851203","sha512":"3b86fc21c7f538ddef6d76ca4a14ddcc2b54b1027fede1b489067201b4c3b077c2db38c181ee7bcbec6f195c59930a7fd79ad93350f64d6c0c596eb3b38151f3","ssdeep":"","tlshash":"39c02b883fc1e018c24221351c6f4286fa39df700c4c1043e042414ab9b072103def0f","size":137,"data":"","first_seen":"2026-07-12T23:33:33.887143Z","last_seen":"2026-07-17T22:45:51.00905Z","times_seen":4597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus-flarefdn.live/","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"ip":{"addr":"104.21.77.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"00807cbdad66322b688e6882ae6c288e","sha1":"21741a67958f4af42068f1f6da28d4a6262e0189","sha256":"8854c90cade249bb436d947ed2e8732377f6e4213f9f244fb71745132e93612b","sha512":"bc3fdc609876e9bba6eea7cf13ba55c7d813c8da793f99ae285dd194164d1753a6fbf723c632ad3123a03b559611a1aab21bb2f90e3e9cc37b31eee5ac92873a","ssdeep":"3:N/BKL1XExg:eL1UO","tlshash":"f95504d0f44135700410f401d1d07c355405050110170455f05d3cdc1f304000070d40","size":1337359,"data":"","first_seen":"2026-07-14T20:51:13.924809Z","last_seen":"2026-07-14T20:51:13.924809Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-17T22:37:08.721632Z","times_seen":777878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fbdf5ea78afa056fc4ab6136c240a622","sha1":"6f9dadb2983669e6f2cf6a923e77b81294074b7e","sha256":"ccbc90d0c11c4c22b42afe49ee08401b77b08bb0b8d3e1006e07d5eb404be0a5","sha512":"44f996e7e7a2975abb95c5cfe221b1659a85ee6da953853615bb30bccdb292285d92170c20d7f0b48d0e3182bab05a314ff06654e68ed830cb2e081128916032","ssdeep":"3072:k8eIESRrjLaVcLvvFGhxTyabsPYZrtvV27c+/tXFM+ih9Q87i0vj5SO88sriZmXN:k8RXFY+zBih9Q87UOWi0My","tlshash":"8a34fa86fcc271462256d1b802f73dfaa267aed861154c0de020a6e97cb6718d73fc5e","size":238165,"data":"","first_seen":"2026-07-14T20:51:13.9335Z","last_seen":"2026-07-14T20:51:13.9335Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus-flarefdn.live/","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"ip":{"addr":"104.21.77.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"79a270b41d0acda8f93eb6d12378743d","sha1":"6e3bad628cd8752f5beba0ab3c8e39ce62a94161","sha256":"c7c0f7283c254885b4767c19cc3abea9b04132dd69a6a465e07557b8b3c88538","sha512":"1ad6e4e0c9791cf8bcea61c76b6a3de8ecac6914538834ad75aa67d622934a476d9fc4756f3f6bcd9f4f0c09a921c85e1746eb9643e1f548ade6d5378ba2b99e","ssdeep":"3:N/BKL1XExZ:eL1Ur","tlshash":"fd5504d0744175700410f401d15034355405050010170455f05d7ddc3f304000074550","size":1337359,"data":"","first_seen":"2026-07-14T20:51:13.934779Z","last_seen":"2026-07-14T20:51:13.934779Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"581fea86debfc9d0d58bb68745ad4779","sha1":"1f91f29f9cf6a8588b760bfb4a7bb2cd85de8a23","sha256":"8ead76776e3c73d6ad33a34691f994ab21878b34d6b1b48de8c3efea195809f5","sha512":"ec96109bae9cc4663eb2d2edc148dc0d55ffc43f3ed91fb62c22026de827a41f8432fdbcf1515d335587877633cd52777cf6ef4294b82fbceee961625ca7d422","ssdeep":"3:N/BKL1XExW:eL1Uk","tlshash":"6c5504d0744135700410f401d15034355405050010170455f05d7ddc3f304000074544","size":1337359,"data":"","first_seen":"2026-07-14T20:51:13.936278Z","last_seen":"2026-07-14T20:51:13.936278Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus-flarefdn.live/","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"ip":{"addr":"104.21.77.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-17T22:37:08.721632Z","times_seen":777878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"d1c3fa0e955ef54f13aef4e242e003b5","sha1":"8c0d8894259e068b264cf6cb60ba2ed6b29dd02b","sha256":"95e93c16c8b956d6f5451acc9aced7262d07291c117d368c6ff8bb6ffeed1d45","sha512":"85ce9d82ce0e21347ce73c70a3e1433df07dd3b85107f2e878ae8d88ae14c443282017a7989e03addaf1b0504b6b06bd7a5b0a784839ee4e175a15a29cfe20d2","ssdeep":"","tlshash":"07c0123fe1fe1c58662624353c7b39a4c827331d5505bf946b1614c50b924e0a5d1f76","size":194,"data":"","first_seen":"2026-07-13T11:09:42.467038Z","last_seen":"2026-07-17T22:52:02.314965Z","times_seen":2312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj193 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":88273},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj196 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process8//obj197 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":88273},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj199 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.3314659792299779] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":88273},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91084},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91084},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91084},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91084},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91084},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":88273},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj191 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":88273},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj194 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process8//obj195 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":88273},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj198 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.3314659792299779] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":88273},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91084},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91084},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91084},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91084},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91084},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":88273}]},"http":[{"url":{"schema":"https","addr":"bonus-flarefdn.live/","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"ip":{"addr":"104.21.77.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-14T20:50:41.227Z","timestamp":1784062241227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonus-flarefdn.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 05:44:31 GMT","end":"Sat, 10 Oct 2026 06:43:06 GMT"},"fingerprint":{"sha1":"6E:92:7B:A7:C5:4E:96:97:EF:D7:BB:6D:A3:65:AD:1E:BE:18:21:00","sha256":"25:29:25:0E:83:17:1F:3B:65:9E:AE:B8:6D:F3:61:01:6E:F5:0A:F6:D7:B1:25:39:4C:64:D3:90:23:5B:5E:D2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bonus-flarefdn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-urLvZTSygAYrnbQltJfXEl' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a1b366afdacd56b9\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B4uSgyx%2BoVyKsXeVw%2BcmpbyZhVWfrRDg9EhLvp7NURuSTzfm%2FfPnsFHfdqOLr6CnYBTDg8MDZSszwANlqf1%2FC3AABJNjYE5JO6j9JUypesLfbmG5PKgueyk%2FsuiQVP0ou7lHhaJK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 14 Jul 2026 20:50:41 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a1b366afdacd56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5580,"size_decoded":5547,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5580), with no line terminators","md5":"e6b21bda63bea1277ad5dd7b813be969","sha1":"c9baa8e5d45743315e8a8a27f3b90fbe1ac6488d","sha256":"a6df25e1dafa2386bfe2b4a4a1554db6af1cbccddaaad6c7c3f203efbf9803ff","sha512":"ae3258f68ce05088c8f8183bd0e89f2ee3622cbbf9a6f9d8c61edfab4f7d4eff6a95197e00a2dd3cb315d98dcbc366c26769b24bff470d321620d6f3bfdb8118","ssdeep":"96:PNy+toXZzIEb0EaW872i9m/J/1WfMt9a53bDzq8M1qGAnIAQkYzueh8Mlmw:PNPtkCBh9mBp9qrit1tAnIptytw","tlshash":"3db15bb7a932202657f63f5290f6b3f852216a0d7f0664a4d4d5d75c1deff4f4015290","first_seen":"2026-07-14T20:51:13.896007Z","last_seen":"2026-07-14T20:51:13.896007Z","times_seen":1,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":6,"connect":19,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus-flarefdn.live/favicon.ico","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"ip":{"addr":"104.21.77.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus-flarefdn.live/","date":"2026-07-14T20:50:41.556Z","timestamp":1784062241556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonus-flarefdn.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 05:44:31 GMT","end":"Sat, 10 Oct 2026 06:43:06 GMT"},"fingerprint":{"sha1":"6E:92:7B:A7:C5:4E:96:97:EF:D7:BB:6D:A3:65:AD:1E:BE:18:21:00","sha256":"25:29:25:0E:83:17:1F:3B:65:9E:AE:B8:6D:F3:61:01:6E:F5:0A:F6:D7:B1:25:39:4C:64:D3:90:23:5B:5E:D2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bonus-flarefdn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bonus-flarefdn.live/?__cf_chl_rt_tk=m_QjZY5KuBetej7Y1YAJYY76s1LYVm4M5NdgJni.WZQ-1784062241-1.0.1.1-2EVluEV7IFTGQ3_FRlTExLba_N2qWBfapxjcFS9Aerc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/vnd.microsoft.icon\r\netag: \"djwi4rca3emvbvy-gzip\"\r\nlast-modified: Sun, 12 Jul 2026 09:57:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Tue, 14 Jul 2026 20:50:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=orHufGcSPtkpeNDjGURah%2BtvyNRd38GYABBvulbdmRXxiZ3AZ9qZbe5RR3ejqwrTcFvinTPLB20PLmCMz0YrHA0gPY5fnuLDxo9%2BsaYvi9qTcln3ML8gLVhFT9Xq64jZwfD0yYJj\"}]}\r\nage: 475\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1b366b1bae556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":3365,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dc270172d1648eb90a7ac9e496aaa7ec","sha1":"4c6c6b1d4815a5022e215fe4667fe55ff908b13f","sha256":"d4e950e20f2728c5addc06853e7802699855c3ff9166375bea74da43e214d99b","sha512":"829338b30e6435447174ad43e0ff80659a93bd50aa00f135ac739203efb8e6b471864222250f2180af429b8396201611fdfbf75a6a2c252ef45a93a4f692640f","ssdeep":"192:l8WBBBBBB3vjlZXBbxEB+///////////7AFMCpQ:jbrXXEcd","tlshash":"bc62795166299107f9ab803ab34adb6af27ffec5e91b15261b407129103e09270fdf17","first_seen":"2026-01-21T22:11:30.922214Z","last_seen":"2026-07-14T20:52:14.770521Z","times_seen":198,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacemono/v17/i7dMIFZifjKcF5UAWdDRaPpZUFWaHg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bonus-flarefdn.live/","date":"2026-07-14T20:50:48.496Z","timestamp":1784062248496,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /s/spacemono/v17/i7dMIFZifjKcF5UAWdDRaPpZUFWaHg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bonus-flarefdn.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16724\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 12:57:44 GMT\r\nexpires: Mon, 12 Jul 2027 12:57:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 201184\r\nlast-modified: Wed, 25 Jun 2025 16:58:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"font/woff2","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T22:40:27.187426Z","times_seen":17324316,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bonus-flarefdn.live/","date":"2026-07-14T20:50:48.498Z","timestamp":1784062248498,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bonus-flarefdn.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 10:13:52 GMT\r\nexpires: Mon, 12 Jul 2027 10:13:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 211016\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"font/woff2","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T22:40:27.187426Z","times_seen":17324316,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/3104729c556c/api.js?onload=WBul8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bonus-flarefdn.live/","date":"2026-07-14T20:50:41.841Z","timestamp":1784062241841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/b/3104729c556c/api.js?onload=WBul8\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bonus-flarefdn.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 14 Jul 2026 20:50:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Sun, 12 Jul 2026 00:36:37 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://bonus-flarefdn.live\r\npriority: u=3,i=?0\r\netag: W/\"6a52e195.00000000-12529\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1b366b3982ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75049,"size_decoded":24726,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"695698c613d35c433471c55525a0be78","sha1":"a4c5a51074996c0e6108c8e518bc871d5570745a","sha256":"5c5c445b67e1cb710a98338a2ee3631506a50351a355c9cbcf455c8fc48a21f6","sha512":"0340b6beb6180c0c059434884905597fddeaee363a7eb1ffe25847ef2da909747bb33d9ac598cb690c504de45697829966d7e3c9a5e21602b916af49d2fff1a5","ssdeep":"1536:tMAA+jXpq5RDMDpydrdopXOe1C05V4tMlsgV0Di0w58B:t1tYR0ydrMXOe1ldlP0Di0w58B","tlshash":"bd732bc472aa7862139ac0f4913b6753b3257d3aa84c8850d467dc653b7cd869233fbe","first_seen":"2026-07-12T22:51:46.413958Z","last_seen":"2026-07-17T22:45:50.935679Z","times_seen":8219,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus-flarefdn.live/cdn-cgi/challenge-platform/h/b/fo/2458181418:1784059319:iP_X0PqxF7k4sv7QwZc6w3VnfsFT1LviHhSAsCF3HNs/a1b366afdacd56b9/CzDl8uCdfWom3R58AbN0dqijYQe9jN682gTj1saodHQ-1784062241-1.2.1.1-_IGkL9mqQBtg.TUyR_MblNOiqNTsijUAQcg.6Cjc2BApmfIn7_lpOZNcOS5R3Jsj","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"ip":{"addr":"104.21.77.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bonus-flarefdn.live/","date":"2026-07-14T20:50:41.859Z","timestamp":1784062241859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonus-flarefdn.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 05:44:31 GMT","end":"Sat, 10 Oct 2026 06:43:06 GMT"},"fingerprint":{"sha1":"6E:92:7B:A7:C5:4E:96:97:EF:D7:BB:6D:A3:65:AD:1E:BE:18:21:00","sha256":"25:29:25:0E:83:17:1F:3B:65:9E:AE:B8:6D:F3:61:01:6E:F5:0A:F6:D7:B1:25:39:4C:64:D3:90:23:5B:5E:D2"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/fo/2458181418:1784059319:iP_X0PqxF7k4sv7QwZc6w3VnfsFT1LviHhSAsCF3HNs/a1b366afdacd56b9/CzDl8uCdfWom3R58AbN0dqijYQe9jN682gTj1saodHQ-1784062241-1.2.1.1-_IGkL9mqQBtg.TUyR_MblNOiqNTsijUAQcg.6Cjc2BApmfIn7_lpOZNcOS5R3Jsj HTTP/1.1\r\nHost: bonus-flarefdn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bonus-flarefdn.live/\r\ncf-chl: CzDl8uCdfWom3R58AbN0dqijYQe9jN682gTj1saodHQ-1784062241-1.2.1.1-_IGkL9mqQBtg.TUyR_MblNOiqNTsijUAQcg.6Cjc2BApmfIn7_lpOZNcOS5R3Jsj\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2050\r\nOrigin: https://bonus-flarefdn.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2050,"data":"ayq8bzzkuR9f91Ka$Dp+tAqk4HtBu9+5wXA09sXsH+wHXC7Pb5-BXOHza53e6kYN2KZgIfsFn42AG6Yx2Is3sTaVSu+Pwww9vIx6LH3DcBAHgZhWjX6nNTxMuqJDMoPBsKb90QytYwb4LL+lZjrCnp3EHxZGTbixiCz2HqhqAmc0ua$ZyW+W3cMBDg9WcLONbrEUf+BBnx2g4q-xpaLhRwnT5a1CBahDKxfcuc03kTaYgTDkefvTut2OwZjyh2+VAmNsq9nvTz5ZvhGpu7Y2xM7rUuTjM43CfLCCVWQTH$wIIAuEKW7ymribk83oZf6m71YHk6Wi+Vp+zlzkn51hRhN42uzureKV$Ukg09LyeG25ghLDgMlgsjqxILR9rv4OwgMwmWACDeKw4YrqHf5p0EG1be-z4ElCUG-UrO5Aq1CV3hzSfJV9YFi-gVw0orIsiiXEv6TRhZ+I0--oLJ3nawoWlTv+rBIHCVvoxoHbxgvZFHLBVgAnz63YHYRUb59+aRK9CR1J$Gv4QmDvcbx+7HshKRNSEfyPQAlOz5pe-0l3R3TGS60okyRTwA5l0$jHlwuTjn5ZvDXA7shDjcWolhWPSoXUW4lGql1jP4W9i7$XEHcws2CEtwKih1807P+a-WuJXXoLy61F+7UCR9J3UGJ9Pv-fr1pMcCpzeVRK3p1pwhiVutDb7HZYTEmtfKWcTanhPJUS-61+8uA$RS$yPC12ZQPQKRcIg8kynemT$Xh7a3J1DV4+VkmQ$taHD$jhu8iMUMXoFP3yDAEN+XfN8$yEO3OkW6kwgTUyne8C62KWb8YhNW-XtnnU6C-TKH$K4CGr1JfLTuCXuTvqBiHMziMFEF8v4Cge84H++2S5nFm$YvNCQkQIqoQ2EwwQUtgAb3aItncx7fl0BLccFzWqh7upl+IWKeLTr9JcNi2lo5hNoiM-5LhwfhL0aR+kiWOiIx0RYPiGDZr+hpvyMf55E2tDv8hSxS$1sxQnvkryMRZb$SlfbKZItq7Zm1k5D8fsZIQSJ$U+fmy0E$bLIQtcSErBU5+N1cIa7yRz9O3TSgA7VPBFmsvLoB2D4ZQI2NhIZrazznpS0XeM2sVbxz4$AIF6LN$z-sO7j$rHtk4mkL3SL76yJjX7j3JnTCFrHReMNkswu37rLXsLObGy9gXy4U3ik+0x$4qGpk-ihbhfurykX2NSt4ikEQuAHULsWcwkyVtYaTrjXi8U9tcp69fGAPZsOSIz6y8w9QGT8QKHnttNpV-6v$5kHoop+iWIwVJ8ueS7ozU3MeeREOf92z$tkBXlWuGxVZTnKwAu+Qhfn9mCKsWlnXAQLlsFWHi5UVrlc1GRWWyY7Pz-n$sXMQzW8JlGuOCkJaAp-Mepc7s8f3souyCqPnZoSoCsKQkRPbcXlpe7Dzx6ICaewvktoMLqiFQvi41313j4Ut8EfNc9j2tUPHIT09bHAu6UNVphAqYR-QnXEFR3wnXvtslARpFP0Zqit8SliFYsMgxb1S9xCGYUKoeEXgvR6B4$Mwgkjix+awvyzbI$TwqFJowc3DCUKyWgcR7hUwhwDRvxyyB+SGLPGKz--nNOb1QnT3-rNV2GOZBEOVWs33MepmaNEG+BcDWXDrbIjeYeJUWITvb1$IXI0h6jr4TOgIsMft2g$N0jBXxs6rl8GVxwC+-57v4jBBI0wuk0AsREnfEKZRLyb2PDgfeh3wOHAGhQLFVrm2t2RMH6Ju1224l89sgrMLQiKAzJ-+COw3Fu3Us6DhXvIjQrK2jLa2WLFK-pUCgs8PHzYyPGsi5BP0ev-V+MQZi7XqhizAKHaScxsFk6+cZ2BvaiaXB-2CzybteH$UjMbHmL1$zOeaqO1bck7JZR92Y+ryhEiOtjmEM-Jm75Wqn2caOUw7AYva2q0gxJzcM$oVhjH48sozt+ElnB4Ehek99Pb2mCAv1Y6fHV-Jbyj14W4oHJLUzUyU$kKcZB+m7tKeI$OyDkH2oK3sUYePP4Nbm0xJHQOm7bQr+IXZsLxMuXUx95WcR2t4-$Su$pOHm1S-ejUV"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: fw7B+BXnzhDYb8I+10uOiXJbgUJPbScNNVUghTIVcUM=$doAmJlHJISW1/Bu1qxVu+g==\r\ntiming-allow-origin: https://bonus-flarefdn.live\r\ncontent-encoding: zstd\r\ndate: Tue, 14 Jul 2026 20:50:41 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a1b366b3ab1456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101288,"size_decoded":27864,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cd16d7937fdd1db8be0f9eb55b480fe6","sha1":"29b5f08589e47be5b511f0f67c64e7f98ddfef2b","sha256":"d56606d6eeba8adb9178239e13f9632e5d4203bc111abb5c18dc608be4d7030a","sha512":"2214400b5590bcba35e00edc63ec02c44442ad2ee6367b0ac65e20173d40f97b2e3304dc0dfe20b481c34b66e8a7bf1dfe080c8700b3d1eccc6a67aa57ca2788","ssdeep":"768:dXvHzPJH0T5OGIIG5DpN/iUA50wMOsyNOm1QcO+6nUDW1MrM5ya:dX/D6NOIG5Nj7wMGkwDDW1MrRa","tlshash":"a8a38da9931c62a791271851d5f5cf3bb622c8ca88e72773784e18234d93e458cecd6f","first_seen":"2026-07-14T20:51:13.911223Z","last_seen":"2026-07-14T20:51:13.911223Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus-flarefdn.live/favicon.ico","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"ip":{"addr":"104.21.77.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus-flarefdn.live/","date":"2026-07-14T20:50:41.860Z","timestamp":1784062241860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonus-flarefdn.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 05:44:31 GMT","end":"Sat, 10 Oct 2026 06:43:06 GMT"},"fingerprint":{"sha1":"6E:92:7B:A7:C5:4E:96:97:EF:D7:BB:6D:A3:65:AD:1E:BE:18:21:00","sha256":"25:29:25:0E:83:17:1F:3B:65:9E:AE:B8:6D:F3:61:01:6E:F5:0A:F6:D7:B1:25:39:4C:64:D3:90:23:5B:5E:D2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bonus-flarefdn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bonus-flarefdn.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/vnd.microsoft.icon\r\netag: \"djwi4rca3emvbvy-gzip\"\r\nlast-modified: Sun, 12 Jul 2026 09:57:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Tue, 14 Jul 2026 20:50:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iV0NvHdsyMek4alv18VhVD%2FdQx%2B730g%2BCzpDlroCcbs0%2BBK3UK4ErUM%2BeAn8tapSDMIa0%2FzJRubgNvkkFjKNkzapfQXacOqE%2FMLYqaYI42KRonuSvCtFUlemXEnNcn26%2BKZv1dJF\"}]}\r\nage: 476\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1b366b3ab1556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":3374,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dc270172d1648eb90a7ac9e496aaa7ec","sha1":"4c6c6b1d4815a5022e215fe4667fe55ff908b13f","sha256":"d4e950e20f2728c5addc06853e7802699855c3ff9166375bea74da43e214d99b","sha512":"829338b30e6435447174ad43e0ff80659a93bd50aa00f135ac739203efb8e6b471864222250f2180af429b8396201611fdfbf75a6a2c252ef45a93a4f692640f","ssdeep":"192:l8WBBBBBB3vjlZXBbxEB+///////////7AFMCpQ:jbrXXEcd","tlshash":"bc62795166299107f9ab803ab34adb6af27ffec5e91b15261b407129103e09270fdf17","first_seen":"2026-01-21T22:11:30.922214Z","last_seen":"2026-07-14T20:52:14.770521Z","times_seen":198,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@400;500;600;700\u0026family=Space+Mono:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bonus-flarefdn.live/","date":"2026-07-14T20:50:48.347Z","timestamp":1784062248347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Manrope:wght@400;500;600;700\u0026family=Space+Mono:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bonus-flarefdn.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 14 Jul 2026 20:50:48 GMT\r\ndate: Tue, 14 Jul 2026 20:50:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11104,"size_decoded":1496,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"15baffe38ba10b8c7135a5607c3d52a2","sha1":"74f9c8aac245eea309fce2510063c2862ba4f6ae","sha256":"17ee8be512e3c3201cb5363217bb6d48943345d584a104a6228dd07dd1de2500","sha512":"770972bbb62335dfefa81081503fce61839de74635b926e720442aae65cf69068b044e8f349f87abf3c7a71a54ba2525d1c229c42b7816c9016aef939402ec18","ssdeep":"192:zJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT807V6FY7sbBxx:9wU+ME02Hbe","tlshash":"0b32cb90002be804eb470cd577ce7e3aad5e61567451c5ba5ffe1c98addbd222320b1e","first_seen":"2026-06-09T16:19:08.244412Z","last_seen":"2026-07-14T20:52:14.804712Z","times_seen":170,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus-flarefdn.live/style.css","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"ip":{"addr":"104.21.77.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bonus-flarefdn.live/","date":"2026-07-14T20:50:48.349Z","timestamp":1784062248349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonus-flarefdn.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 05:44:31 GMT","end":"Sat, 10 Oct 2026 06:43:06 GMT"},"fingerprint":{"sha1":"6E:92:7B:A7:C5:4E:96:97:EF:D7:BB:6D:A3:65:AD:1E:BE:18:21:00","sha256":"25:29:25:0E:83:17:1F:3B:65:9E:AE:B8:6D:F3:61:01:6E:F5:0A:F6:D7:B1:25:39:4C:64:D3:90:23:5B:5E:D2"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: bonus-flarefdn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bonus-flarefdn.live/\r\nCookie: cf_clearance=QLpZ7v4ItT7j06lTStPi4EZgSRY_S2ZM24ARfOqiIt8-1784062248-1.2.1.1-I3SJpMasb1qt3Vy5pEJctE.oj1cznHG1fSmj.Ij4ErKdB9Ossayxgo5s8JC_xVJGhS5s1HjA47cSMM8maU_gkOFQGwLV6dCfLTkMQ3Sku_Stj2Y2eYeP2x6HTij_7UgOCZ5RnqZt5906OpUZqxDbvkk5rrtynJGy3hcLkjjV6gdDzfmp1Cg0krADusnQW1r9tQhETb9COvjrF.LpRlpnuktCwJBenCeAGfSrXdEk9juTeDOXddI.O7ahZN49uS2Yr2HGMxGdr2nXOEq4XZvCEc6kE8cmc3q70ypF98GHOVJ.JffRtoXPveDr36gHZV8Q5Z1BZkMm5naps7ocRjKcyYIHSHihT6KdDRu0znfaTbRKTL3NPKM5.lj308yEg3.8B3nVpU1nDVeQn7vNaybhM63F1SsY5u_.fae.7yinoPnPLZ0fzsV8C4THdrbb4UxbPJaJl3dZUwDUXAxI5o5RvM7OysOfZutxdfE2BFsfuiJL05rcHnnv3isKlnX3GtsU\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\netag: \"djwi4su7mmgxc7h-gzip\"\r\nlast-modified: Sun, 12 Jul 2026 09:57:15 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Tue, 14 Jul 2026 20:50:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=edo81XGSGf7Ue6DRCa62PUTxcjjH7hiF5HMe0wzCkoopwQK7eS8KsD16miVe4j5Vu7DVnmddOFiCkOFME1Pdc%2Fi0W0UZ2DrdMdgmul%2Fu0xS3B5n18URsiyldwe0LtMZM6sMIMjIZ\"}]}\r\nage: 475\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1b366dc3dd056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15821,"size_decoded":3378,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"931c01f3e06f12edcf11fb46967f03d9","sha1":"15b38f12144b7bfda0b30b2fbc7c1444618a9133","sha256":"16f8ad2c74d71e872427a1eb8bb7505b4a949957763467c41ebcac05d260abd6","sha512":"c1b7fab69fcdb6f17dc38e913153315bef803a43208fb1e4ba8ab56ac53ebf6d4df255c88ebde0e1d1da1cc18bee6b51ffd141e3f57200916cdcb4e34413b6ad","ssdeep":"192:N0o8nRwZT1acQQlLeaQ2pChjo0zzcKEs7jd/I0o8nhQ54Lr7Qd2p2m1534ccKEle:6oMGzkloMGOH","tlshash":"d4624154da4a914af133db68bfe24b0ee3d851239a12457d7bd922044ffa1bc8252fdc","first_seen":"2026-07-11T08:25:25.077238Z","last_seen":"2026-07-14T20:52:14.776532Z","times_seen":54,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus-flarefdn.live/favicon.ico","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"ip":{"addr":"104.21.77.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus-flarefdn.live/","date":"2026-07-14T20:50:48.475Z","timestamp":1784062248475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonus-flarefdn.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 05:44:31 GMT","end":"Sat, 10 Oct 2026 06:43:06 GMT"},"fingerprint":{"sha1":"6E:92:7B:A7:C5:4E:96:97:EF:D7:BB:6D:A3:65:AD:1E:BE:18:21:00","sha256":"25:29:25:0E:83:17:1F:3B:65:9E:AE:B8:6D:F3:61:01:6E:F5:0A:F6:D7:B1:25:39:4C:64:D3:90:23:5B:5E:D2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bonus-flarefdn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bonus-flarefdn.live/\r\nCookie: cf_clearance=QLpZ7v4ItT7j06lTStPi4EZgSRY_S2ZM24ARfOqiIt8-1784062248-1.2.1.1-I3SJpMasb1qt3Vy5pEJctE.oj1cznHG1fSmj.Ij4ErKdB9Ossayxgo5s8JC_xVJGhS5s1HjA47cSMM8maU_gkOFQGwLV6dCfLTkMQ3Sku_Stj2Y2eYeP2x6HTij_7UgOCZ5RnqZt5906OpUZqxDbvkk5rrtynJGy3hcLkjjV6gdDzfmp1Cg0krADusnQW1r9tQhETb9COvjrF.LpRlpnuktCwJBenCeAGfSrXdEk9juTeDOXddI.O7ahZN49uS2Yr2HGMxGdr2nXOEq4XZvCEc6kE8cmc3q70ypF98GHOVJ.JffRtoXPveDr36gHZV8Q5Z1BZkMm5naps7ocRjKcyYIHSHihT6KdDRu0znfaTbRKTL3NPKM5.lj308yEg3.8B3nVpU1nDVeQn7vNaybhM63F1SsY5u_.fae.7yinoPnPLZ0fzsV8C4THdrbb4UxbPJaJl3dZUwDUXAxI5o5RvM7OysOfZutxdfE2BFsfuiJL05rcHnnv3isKlnX3GtsU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/vnd.microsoft.icon\r\netag: \"djwi4rca3emvbvy-gzip\"\r\nlast-modified: Sun, 12 Jul 2026 09:57:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Tue, 14 Jul 2026 20:50:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wzEx3ezntKL0I%2B87ilNIU35e%2F8P7rEayVmefApf6R0ZkzPX4WtXhe6g56PhfI9Opft6yHoutTCXKKVYe2hFTgCASaiVoqJlNUlmulNKH%2FVLykeRYBmWuXjH9G21WWiBwzkPOiYGX\"}]}\r\nage: 482\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1b366dcfde656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":3367,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dc270172d1648eb90a7ac9e496aaa7ec","sha1":"4c6c6b1d4815a5022e215fe4667fe55ff908b13f","sha256":"d4e950e20f2728c5addc06853e7802699855c3ff9166375bea74da43e214d99b","sha512":"829338b30e6435447174ad43e0ff80659a93bd50aa00f135ac739203efb8e6b471864222250f2180af429b8396201611fdfbf75a6a2c252ef45a93a4f692640f","ssdeep":"192:l8WBBBBBB3vjlZXBbxEB+///////////7AFMCpQ:jbrXXEcd","tlshash":"bc62795166299107f9ab803ab34adb6af27ffec5e91b15261b407129103e09270fdf17","first_seen":"2026-01-21T22:11:30.922214Z","last_seen":"2026-07-14T20:52:14.770521Z","times_seen":198,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus-flarefdn.live/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a1b366afdacd56b9","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"ip":{"addr":"104.21.77.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bonus-flarefdn.live/","date":"2026-07-14T20:50:41.528Z","timestamp":1784062241528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonus-flarefdn.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 05:44:31 GMT","end":"Sat, 10 Oct 2026 06:43:06 GMT"},"fingerprint":{"sha1":"6E:92:7B:A7:C5:4E:96:97:EF:D7:BB:6D:A3:65:AD:1E:BE:18:21:00","sha256":"25:29:25:0E:83:17:1F:3B:65:9E:AE:B8:6D:F3:61:01:6E:F5:0A:F6:D7:B1:25:39:4C:64:D3:90:23:5B:5E:D2"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a1b366afdacd56b9 HTTP/1.1\r\nHost: bonus-flarefdn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bonus-flarefdn.live/?__cf_chl_rt_tk=m_QjZY5KuBetej7Y1YAJYY76s1LYVm4M5NdgJni.WZQ-1784062241-1.0.1.1-2EVluEV7IFTGQ3_FRlTExLba_N2qWBfapxjcFS9Aerc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: zstd\r\ndate: Tue, 14 Jul 2026 20:50:41 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a1b366b19ae456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221373,"size_decoded":79829,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (43479)","md5":"acc6ad58018170ee0d7b05b1752b9287","sha1":"68db880c70d5235a358cce4608f32dda7676a913","sha256":"15f863ceff7410cfdd2d35ea672b3d640d999e4dfea78f1343825bd3afb6b4ff","sha512":"9ebd3f780ec9fcef28ab244bf8a57a19d395a5120c89aa9e0d399557ec2d9d8a6875e81f7f7429d771c0bc0df8f7d35cc02d02be42a64bdb278afc84c84c5036","ssdeep":"3072:br3FEqv3CZxB2izW/2z2w6qlg/8TcO3k2tYZkCQE1/T:br3FEqv3wxBxzW/9w6qlgV2tLCQE1/T","tlshash":"6724e54ea99632372357527a086b319bb2ee2cc0046c390ce961b0d97f69bfdd12747d","first_seen":"2026-07-14T20:51:13.913622Z","last_seen":"2026-07-14T20:51:13.913622Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/fo/870428975:1784059321:TmAPcguxtk7myqhSR_h3XTrHJfOyqXzW9U1cYte6HLY/a1b366b43a4456aa/sTiKDVyObJtG6CXoUS7z1lQEvc3SeX2GJTVSMHSJTKY-1784062241-1.2.1.1-REtx5qmzkQptcT4C6cvo5j4BzFpzVRPaNH09h_Qqpa6lM0CsRC6UNpq1ZQONjwbg","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-07-14T20:50:42.351Z","timestamp":1784062242351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/fo/870428975:1784059321:TmAPcguxtk7myqhSR_h3XTrHJfOyqXzW9U1cYte6HLY/a1b366b43a4456aa/sTiKDVyObJtG6CXoUS7z1lQEvc3SeX2GJTVSMHSJTKY-1784062241-1.2.1.1-REtx5qmzkQptcT4C6cvo5j4BzFpzVRPaNH09h_Qqpa6lM0CsRC6UNpq1ZQONjwbg HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: sTiKDVyObJtG6CXoUS7z1lQEvc3SeX2GJTVSMHSJTKY-1784062241-1.2.1.1-REtx5qmzkQptcT4C6cvo5j4BzFpzVRPaNH09h_Qqpa6lM0CsRC6UNpq1ZQONjwbg\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4290\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4290,"data":"ivlmPEMyjeuPmsshUKLvKbrgFTqQYwfclMZqCDmdNAqzKd5RGO-zwgClaAikAdodLt3sEwcRsrkqSE+vvzzQWIulGlbcgLAofnzJSAMxkszBGQMQqB1Z+RnDj7f99wwdo-guBgnJvgqD0x0Z0D1a+hhfw8D$RcNjuh177cYVeOECQODPAEUM98zXaZwJADj9pNkE3sgAQy1DgT-6UAxID-9Pg+W$JWh6kKPfF7eXUuZOVSH3HSkldM1duKM7hJ-gUVcCna9+8Crx1-ZHAOh5KKjYX-c3ZnOGdo8B6mCMmWzZZgCk7SDEmXHuQSRTtgCbqu1LHmtXUJfnzUBHSXOTIqBiWfGI9RbNcs1oQI-9RLtCGB+Mpaz+6SiCmrwOGRnVoUvvgEp7oFBcLt19qk+fDBMtcCW2e8z31sqU5AzClTsW03fYb+g+iyS-BwOf-yNLt18zRp0UOA08Hyv9gos6$wRg5ymxW1IC+Pv1duK+NwHXhw9CMRMG1Q1$mQmvP2UaY2WlasUHONCMdR9iFCgd1$uuQmruhcHHgxqcXBw+-gXRU6+-lxsF5KMZADdyGtS+6HeaSoEk71P9kFj9VwAG6uObF8XiauAA5t33zTUqlwupPhnHD5TxGLXiZ1EU90vfJXP1mizZnR56Svm3lF+cIMp8XC0JQNu05hk-ey3jLKagVNbRl8obPr+TurIBhGhNuke8-2cYhGe8maAoQTTTzAFNNaGO8toaBj390IjPDdioPbS$q7ymI5Pq5Q0k17dLR+nefaCa-2Lg7fm7mObcWwHPkMikOiTG1+cfcsMjy26AUyL7L9kkyknsTq7yjBsy0CfvdFBvT3YcgKVqrcr6cKre21x0Q7LvuFToAA$OBZkdosJPqCZxOqxASFBWMGAJ07tgcAgW1c0pleEQPIBmqVAcJmmVXR5jpwC+AvWLm--LuO1ELk2DMgrzCUvZXKMwvcl2PFsbtMMjAuLoqHMIrSK9ejvNrh+G+PYR3ag9O73RynwJiWcXngDfas+Wp3eNq5yCfvPL3Z-2Un5rKiOuhVsid60Sw+QwoutpAgxkbE1IOKiitsFBRQRASjIr$8bWUVhiFLPQ-pPR-l$2j9F+sp7bWR-1C8GOIUI-SxtmE7ftWRTTJpZpULY8AK0gtXXgLTdC9-e7DmHePtI5Bj3jyOY+B-Z8g-L3Gntg8gieNRaAeCaS7$oGA5Eh5nriAhC6FCOjTmdntKS71NsFKsPBkYuJlXP2mro0$JIeHwLIExaOzutRK8VE9TRtG+cPlXRTGtNW-iCJ8bsPPcsMju78ynfsMb6MikSdwSyniaiGUGSR0G8kkiEM83Tb6XbaTwFCyc-+fyylb786D1tjk68nu5uVrlgIfUfLeqYFTOuNitiX36SSh18IE1LKz7wTnK9lpe+0IDUewRVSVWLXEifSzrC8ccL6VR+XBbsdgpsbnR6CdAZeZvtvWiPswdnh+iLaVPC$xQiOP0G72nrmyfkRY+utgX+UeE2+SVZvw5D2P2XyNJyem3pAU0ReeJk9d5-LV$cwmM39yLMbgsIl+5+y3zOAQY+fAP8nIjiwQO$1aY6zXoygZYWRNJ1ST5dt08AzSAi59Af1ev0c725C7lbtk9G1KPWx5CIrNtIY3terc5z0gpsV7ya8D6HII07Yq00PxaY00M8zJn3d297sA8Tf1$2FXJjWdlMAN5Ehxrp5Ync9m5M9ZUBd0IWtw-yjJjQd-20vCd-s3pvtjmXxIhUp0n9SA-d8mCHrQOsQBm+8uWSqgLZolvnUceEwRpLYofJSdN-kZ08FTGr8QKoWM1qEIbbGTTYAcwjyITC17791iZg7KPotg1RpiXLjYGGFCZAMSpXzWLpDxNj2nzxG+bZo01qH7rR7R1wVkM-1+GLuHWsFz-sL1PGa3beJl8$i$cXhX8a$7U19TD$ICrz1iHWeya5MX5rVSWNhzjRkO+ILTAd7v-rarP+wPVKWpn8k-glhVTJfwPOkeaeDXuhYya9Me+A+NLdKPXWK98API07BZrsFIzS3hWuUA$Oz$Kj7qbQ$I0ZIerA55+5Foa6s$pQLOR9YbSjsomqMW0X2qla0bcPyQIirOmTEBGPXIWoHU$lojOWaqcsWRK+enpvr9RdTbzvzjAgmDIfYBnjYlCt2QPb7LWy2A$LZZ7eYnIUCqCbdqRA6OYAfXYGmcz21sHG9q-33$WLUVDPsLgcZDbXGRs3DIBrs9u67$X5yQomn+F13PPcXnHTZU$Qr2i3I1x7tgcFE29qVDSmMKKXPZYxdyx3B70+tv3vcI+WSx39Y+A9IJWpfa-U+J6E7EGKYm6hjGsEVPxQf0rNMVE6REp+d2QfQHIdB6BJZ9TXcj3Q9o6faia9V9hzvbH+UK-CgLh0DjpyLPv5HF+WXmeE6DkVl7W+Dejg0it69de53td$FL+ZOdeArRrS1Oy$CpKOZoynvpa9YW1+X10EKNCPpzOV7Z$zXkstyJ88AejEy0HjC$ynUckn$LlNCeiGdWyDlaPa9uJjvP18hoouJxAIGMKHxXtZg66QxNG8tJUNkIEn7JBAXB2+S8F0IOnOmwC7VVFYDSfjLs3qkDPNnU-wtkYkYsLq0VvmqPnkaguD05+kj$eSKlC6jCXp0yLN0I86Cd6mlqkhso88eb1Y62R+26CoAX2RyP6QnWG0JUKO3bOW8Movyc8$oe8DRmK1WvomHoXpVJovQ9fYvGbLuinUvl+gcxFxyEKfMSkt1vyquy+WhUPM6F93Lx$lSjxob-piL$dgq5zHCWS-raRTpML9E0UA9Se3poUuzwghIBi87uAWW-8jB-VWYeIlpc87HFykMQp6PS0+qCRYJHBbxbxMVOobiokh-peSawFG9VkP0nl11kcoU-FmoBcj+YqtFNt6VSOpi+oa0xwLGe37PW3ozN3Z-qb1k3jFw9Kg6BJh0bX8vS13YlBzVbAKCO7twgyyjwS8fHLx9jwFRA$BBLiZDgM+WP20kPeNGONXWLOK7PBc8Zj+hr3x6b90gnkp-Qrvkk9OICffargyoCq8yDHkc6zRQhYzwzV8Ok-lTllfhyA7osf12+BTk+sVyZRVg5fWA2AUQp-z5cNRTug365zvLYvnsYBvjy5AuDpTL+qYZIzP78ashKxX0aTUvS0nFZNO$kWLk9Ag-V+BEkBXoy$ZZ7sZB3XbHztvrJ1ZD22ipP5fjpP8sqb0AcF5xU+X6GfzlKU1KunQGgku2mWxNwwS7PJNJg-X-hLvfkTN7MHiHb1F0NMyomDtA68umF$eCF2KynHWraxlORdorQgb2j2kGuZKkrjWK21YREU3Xuv2CMgFxKQ8HPyBd9lHjXNf8NekY+hPJHxP8RGBacho0saEYJII+mdfInfqEr-HwUmdkzdJ+1HTy3pB9y$S0a5IONnlUJHxQZ$AIgTeAikk0KhW6DMxS5cUJJdCAf1mK0wlgIASA9IJIbGASMHanabaHbDnFWHQ1hnBxpQZU67qCQZbiKLLz1LCQye8Y50VO$dqqMl8ujRq2deYEEb5L5u2gSmm3kl1uTw8qHKbIIno+30uo6HgYp9U1E$DmRdTJRhtSezCZOm$MJxKUg+gXIe0Y-T3lnQ03vTymP7+07Uq$z3vTnIoufw$vaKq1nY$x$T$roLJ-SCNg7S55E21GqUgMi6epRikAI9j1WlSieJNa+asNgNb8zxZdLoVPdan-S52Kb092HgKltzDIwVueXOC9GaTc$zqdve9nX+oWsoOSveSEM2nxHKojOdZ9PmgYo1cW7KGsUbT027Gmb8XQd9Nl6riHkGW9Wbb5W-ayDA+6kBapvkHUuCy-lvLFcmK+vB6zmzNyIacBxPSsMq7QPJri8tadLGl-R21$zt1fc-o-qhtuglZt71Y36acZB$kDDygILU1AxeJbOX8iwFhIEkQgTxqFxw0MJjq3uZ5OMjYIN53CThO5lcVvlw0c7euhHD18R5vqLuVJ$l12DlHeyMylmdY3slMNFewPSTSNqn-lvBd6ZTl7QLVsBguo-eDpQ3TTec2aO2SItsIqN8iiLSHBvDOsrRzWBaNVn5XVfzjBQ2H$Gm5u723mzYxOiV203dWr3Fh9ZSmXei2shBvBTH6s09xWzlUFQlZdPAFAos1qVy2P6RgWMmFGa6r$Z9C$yuCk$JpuSMiWP1-PBWNcP8GvtQ1kt2v06sqn0PNWF8GOt-0ABGHTF62I0zefKIvymEzUqRff52QBzJNuUXQmQcWuonDzhcbT96pqarLQbNsDLA7iPFBaShxdcRRnXEeiAbqhZKdatlurGz"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 14 Jul 2026 20:50:42 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$pwZqjDqGXTGBktN74V6c3w==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1b366b6bd4356aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":498304,"size_decoded":328832,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5e84e661e596a01e07d9c0f5c1287cb4","sha1":"359d053b8a9187634cedf5769a9270463aec9bed","sha256":"4dc10e45169a94c08081b6eace95c8ba62db12956c88b75b68e4d7ea4f37c2cf","sha512":"b7ac5be59d4ff3110838b7389ef82db28e06cd65c25039d3a25ebd7b3e542ceb69c6ef993a7b78dea4240248c2195a832e499b63ec092dec840e81750f4ecf03","ssdeep":"12288:m26prLK8a3N7RBkJ1FAhNUnLiHCyxGP07npd/4W9pvo:6xadRA1CNULi/GPyn3/4W/vo","tlshash":"b1b4125afc762be5db46df3f1c500874c96491fe6ca6e814dae9a64da80cca3021137f","first_seen":"2026-07-14T20:51:13.914784Z","last_seen":"2026-07-14T20:51:13.914784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bonus-flarefdn.live/","date":"2026-07-14T20:50:48.492Z","timestamp":1784062248492,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bonus-flarefdn.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 10:13:52 GMT\r\nexpires: Mon, 12 Jul 2027 10:13:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 211016\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"font/woff2","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T22:40:27.187426Z","times_seen":17324316,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bonus-flarefdn.live/","date":"2026-07-14T20:50:48.501Z","timestamp":1784062248501,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bonus-flarefdn.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 10:13:52 GMT\r\nexpires: Mon, 12 Jul 2027 10:13:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 211016\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"font/woff2","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T22:40:27.187426Z","times_seen":17324316,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bonus-flarefdn.live/","date":"2026-07-14T20:50:41.952Z","timestamp":1784062241952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/1k50k/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 14 Jul 2026 20:50:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-o6haCU2QAPiopO7ovkTExz' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types Okgy0 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1b366b43a4456aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: 92pulghy;dur=255782, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255782,"size_decoded":100098,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"6350c04c1ba4f995a0580677e59bfe96","sha1":"75ac3729b5794a42f87c3ba557d2d5f0cc01110f","sha256":"cc0ec086fb5c474116260d4745b4950d5d5f74cf50e1d977a375cf18b8f5805b","sha512":"c4fcebbe994fe32d284c9f7a30fa38bac1c1433a844209049986bc931d5581fa224aabfd6d8b193a7ee711d99aca02f47057319c31fa0ccd4f8303bf27822cf1","ssdeep":"3072:q58eIESRrjLaVcLvvFGhxTyabsPYZrtvV27c+/tXFM+ih9Q87i0vj5SO88sriZmd:28RXFY+zBih9Q87UOWi0MS","tlshash":"cc440b86fcc271472266d0b801f73dfaa167aed86115584ee020a6e87db6358d73fc4e","first_seen":"2026-07-14T20:51:13.91573Z","last_seen":"2026-07-14T20:51:13.91573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus-flarefdn.live/","fqdn":"bonus-flarefdn.live","domain":"bonus-flarefdn.live","tld":"live"},"ip":{"addr":"104.21.77.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-14T20:50:48.192Z","timestamp":1784062248192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonus-flarefdn.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 05:44:31 GMT","end":"Sat, 10 Oct 2026 06:43:06 GMT"},"fingerprint":{"sha1":"6E:92:7B:A7:C5:4E:96:97:EF:D7:BB:6D:A3:65:AD:1E:BE:18:21:00","sha256":"25:29:25:0E:83:17:1F:3B:65:9E:AE:B8:6D:F3:61:01:6E:F5:0A:F6:D7:B1:25:39:4C:64:D3:90:23:5B:5E:D2"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bonus-flarefdn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bonus-flarefdn.live/?__cf_chl_tk=m_QjZY5KuBetej7Y1YAJYY76s1LYVm4M5NdgJni.WZQ-1784062241-1.0.1.1-2EVluEV7IFTGQ3_FRlTExLba_N2qWBfapxjcFS9Aerc\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2093\r\nOrigin: https://bonus-flarefdn.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=QLpZ7v4ItT7j06lTStPi4EZgSRY_S2ZM24ARfOqiIt8-1784062248-1.2.1.1-I3SJpMasb1qt3Vy5pEJctE.oj1cznHG1fSmj.Ij4ErKdB9Ossayxgo5s8JC_xVJGhS5s1HjA47cSMM8maU_gkOFQGwLV6dCfLTkMQ3Sku_Stj2Y2eYeP2x6HTij_7UgOCZ5RnqZt5906OpUZqxDbvkk5rrtynJGy3hcLkjjV6gdDzfmp1Cg0krADusnQW1r9tQhETb9COvjrF.LpRlpnuktCwJBenCeAGfSrXdEk9juTeDOXddI.O7ahZN49uS2Yr2HGMxGdr2nXOEq4XZvCEc6kE8cmc3q70ypF98GHOVJ.JffRtoXPveDr36gHZV8Q5Z1BZkMm5naps7ocRjKcyYIHSHihT6KdDRu0znfaTbRKTL3NPKM5.lj308yEg3.8B3nVpU1nDVeQn7vNaybhM63F1SsY5u_.fae.7yinoPnPLZ0fzsV8C4THdrbb4UxbPJaJl3dZUwDUXAxI5o5RvM7OysOfZutxdfE2BFsfuiJL05rcHnnv3isKlnX3GtsU\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2093,"data":"8e22c8a79fd84e252beee9847c32df83018f564c57bd89cfe6abaa65056a6fee=vWAPxHtStSTdzCteorCPaW9CLo04QKdYw3iJaO60a7s-1784062241-1.2.1.1-jcTHXimdfgY1dBPMG96CGkuYNhZys9P_v88VfyHGrGBcPM.lkKik6Cv8M6RufhF.f.5wNpwCqg.lgD5gSy_Rho8JqdPcB3xaMNgdQIH6Ou00K86HIw7zBWStBeA_s7tCJt_n96BVRegDOx6qg2ONhzpY3297r._jPHYyHil0NNmRmC3UPt5DE2N4dJ.XYFUcmyOuxB0ghWM2LAjBrveR18GuuTfjW5py45HmAMe4waKj88wXZYHB0oGQ5nddIJeZovcGn3tnrNih56xt5TC_6UAsuRDzGh350ZPdSJjKCGv1H.KmotyxLOiS1MV0RKoLYoxtlkli4zzGIhX5hvz0maoe5KLowlVTFnWPyUm4DCLKu_0rbV2sAXYEIFvNJ3d5B3lrb.uVot26kFHejjEHtvsyCk6r4HZY.7rHC4uiZpRubEOKFkbNICcWhHfpYDJNRnFrUr13dPjWWH7o3fKwPGSKbXZHSoZUps.lQ9rjwgJUQ88qg4L3GKBvuGbDeEZ0vVoaCFt1dFbGJoefd9tD7XQ0XUugNYyg4lsyeuMcaIMJY5FQan2bpJ0B_KSqQDVcHpZj9O6wyn5ytjUnGV0mSFvpJ1sbWJDgudDg.fprIiQ.CJJ8OdIhz4qPokKhyDcpB6ETdOmQ4eRHr2v1EeobbaHtZQGPnVF7bvfZIKDMxmBqoetLCbCphmoY4c0eHM5X10Wcfarc4wUNjtfB6JX8q2tXM.4zOgDNLp3SwGGr.1QlsSLlc9OnuGZCERmKAKynCeEKugyeT_LVN84J5C3K7_aiXAjo.66QC9fdsQc4McwQeZO_btef.5y8NXedv27cYs3wIp.MHdp6SgeByvKW9CRZDP_RjtTx81ewn_j5WCYO2dRPk4HxTTdKbpqmDc7ynqyp2ZrpumbjugD_kM9FOIyfhWYT48IMJHkP5ntESVef7FmWkfQJ3HUtRKglz02e8cKZCQYPHLJRNhdUZIEIHbQrtRcdU8m0FfsBZI186BrXGwZ5pld9UA0ViruTC6wg\u002615c7e196efe7712939e740db22fa146a42ecc69ada50725d3f979025ab9ec2e3=3zQC_lar.eOwspaxbfWmJ8OEGNy3_igSCRG6lByRpqs-1784062241-1.2.1.1-0PP8pthKxRi_AfCTpZfinWqIi5F8jx0fXEmDgctnDj4ERw_go1.7xemJOa_UYvM9UGho0lZ5RSvByrjy16B0ktFaGBEvh2CmM6qd4oQT4jWpm9oCFWt0wUlYPEcyU_qNDlR8LDG3y_TTrRZg6l65TnrV.UU3gK9h_Arji6ZTTDU7B1bn1L7opMTLA_sH8Iq8JHqY1tt05N3OnMb.w8xsfvxWUUGn.9dOW73BlBzMAidIA.EezTutjIb_C.9g1DZXxa6.SwImurUTGh63DRTAMbkk9ntVGun4ue9KecHvOAJ7aLtfopYonFGCYAxHK5P..mUpEaD31f2Nhmgv0RHhVFVbgbhlJZJ423QS9I_.FWkX4LZl4.gKBvF1stXMT8.aqe2CileDHT.2Q8Jbf_o4WWwo0O8icIoKwTpMjRAMExx2xxm9YGRx__HeT5XNouzaw_r9vZIGcV34LMaf5QpBXc_qvRpdJVtkMbF8IVlUnHM\u002675463595505dd2f7fe0d1f8c54f7935aca3e509a6534306e4df25e4205801e83=vpP_VveWmTfhgh2nkvOwp4uV1MIPDKnQFahoGwfL1Ig-1784062248-1.0.1.1-INEAg.MKaMsoouMGn6.A59pt0fiVRjJR48gm7t33N9KxgJFCsSEIsr5we3iCvhOJOFWD0yIoKrOulw_dxn70nrk6wFcUnUzGfCMszNRdUbN3RWV2.88SaWdzQ2lKHo.4kv2npvOoeILo4iuE8IP1Aor8Rg_STjlBtsNNDbITWwC7AAiS4O2Z0BUZtiCrcnTv"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=0,i\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 12 Jul 2026 09:57:12 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Tue, 14 Jul 2026 20:50:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6D7Q8QCsFkpxa4O0d1lywd28j7TDdLrMRemq24sExuwZ3ZciblPX2nEDRpuzvtlLhIwJPVS56r0kJ%2BiviXWUu%2BHUPKfgZU0Tb68AZLzN6t44CGxGgIh4TmNtN%2FWxZu59jgopAf5i\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1b366db3db656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6544,"size_decoded":3273,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (556)","md5":"cbc8cc38e2a3cd98ce5a3839f44ed1c8","sha1":"802893b9c0f9dba3f48ca5c71832a7f3f682b7d8","sha256":"8c305f47c74865bab04ece07fe407be85dac065ae353e9ee495a23525e419008","sha512":"5855811941515cf8e8a03b1f043569147bdba4e4a8ee019ebb11fefdf9316e51dfcb14002a3c46ba433b709d141eb37b1563403db50dd83a453cca3d3a365572","ssdeep":"96:IzR7fWS4n7EAP5pYuoEoF4uyjs0okZR83Vfbj6hRCzI8cVc5J1cM:IzR7eSw7NoEoF4uYDIFja0/cM","tlshash":"d0d165f0a19011e121c5f3dd7432316a2496f8bbea028142f2fe36994fe9ec6dddb549","first_seen":"2026-07-11T08:25:25.07096Z","last_seen":"2026-07-14T20:52:14.802602Z","times_seen":56,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"bonus-flarefdn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacemono/v17/i7dPIFZifjKcF5UAWdDRYEF8RQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bonus-flarefdn.live/","date":"2026-07-14T20:50:48.506Z","timestamp":1784062248506,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /s/spacemono/v17/i7dPIFZifjKcF5UAWdDRYEF8RQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bonus-flarefdn.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16520\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 04:47:59 GMT\r\nexpires: Fri, 09 Jul 2027 04:47:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 489769\r\nlast-modified: Wed, 25 Jun 2025 16:58:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"font/woff2","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T22:40:27.187426Z","times_seen":17324316,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}