{"report_id":"9e3f8191-3b5f-4e4d-a10a-c7de8e58011b","version":6,"status":"done","tags":[],"date":"2026-05-27T00:01:12Z","url":{"schema":"http","addr":"cryptohomesteading.com","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":0,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"final":{"url":{"schema":"http","addr":"cryptohomesteading.com/","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"title":"OnlyFans Search \u0026 Account Finder : Near me, Genre \u0026 Location Search | OnlySearcher","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cryptohomesteading.com","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":0,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-01T00:01:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cryptohomesteading.com","ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"domain_registered":"2026-02-10","domain_rank":0,"first_seen":"2026-03-20T18:37:34.35403Z","last_seen":"2026-05-26T17:01:27.613502Z","alert_count":102,"request_count":51,"received_data":10664975,"sent_data":21627,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/DbeLgc1x.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5ba74b2d97c5fcebcb1deab286c9a08","sha1":"a88c67b1548e5a78b00cf8450dc8bf4f7ab72daf","sha256":"b71a02197614f8b2b58876fa6a337137fc016e509367c0aa38a72e48e23a02ce","sha512":"fc298dfc167d62bdaba552ca17244c86056cafdca3f9b25053e24baa95011aa28febe07414f2851ed526ac6b4ce07c546cedec913da99cbf4ccc5be298cbe876","ssdeep":"","tlshash":"2e61c70d743698bf9b63249971dcb59834182bd9a5e441e037bd0c3287e5cea6223b39","size":3473,"data":"","first_seen":"2026-05-26T17:01:28.727267Z","last_seen":"2026-05-27T00:01:19.386177Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/JaWt8-LI.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"introduction_type":"importedModule","is_inline":false,"md5":"c3bd4239e958f1988f6ccdb7825f240a","sha1":"8b96ea8f695c1118586573512e269fa0f5907bb8","sha256":"f8cfe150504b974b27fca04f048124caf7326b2ba14a8bc453974a2a639f8d61","sha512":"65595f1895399fd260af3096d2aed117f9c84fc972e991b134e6c47f85733744ed0c1e6a1d1e26e3d207fd05f501185dba03aaef8b14d0fe9244c38f4895505e","ssdeep":"768:FN2J+NW7Uaz3ze1+OLEmwwUrvg4srhiVU7n6Vd0GwtK:FN2+NW7U43ze1nBUjg4aYVU76Vd0GwtK","tlshash":"a623fe0a910e9c3fb5c8f75d1cb03d8c4c8d30157380a9bbab5cd9dd46967e4a72ba86","size":46782,"data":"","first_seen":"2026-05-26T17:01:28.725014Z","last_seen":"2026-05-27T00:01:19.378949Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/DMm2JOVU.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"864ea6e47c11a227e5736f56a286f10a","sha1":"302fd0120dc14c1447d6a2fad868e917a8baa935","sha256":"4b88bbd2768bc98530141a44334df3dce5813d691eaf5fc3b860b7b862466e31","sha512":"a5cd5aebba7d6f1fc80226b11623dd8be17b2707351071cf21a1809f1b98a98da6cf6a615c9e93c6498b04aaa245a26008140a2b459da3b98aa78a1e338921e1","ssdeep":"6144:/3va5KpnfPV/bZvHVeBoxFqRdhKKp+fOI:vva5KpnfPV/bZvHVeBoxFqRdhKKp+WI","tlshash":"262613623241a9f6f7251f4ed0dab3db649430e0a49dd9c2fa68d63cc81d12ddf20e96","size":4612455,"data":"","first_seen":"2026-05-26T17:01:28.811434Z","last_seen":"2026-05-27T00:01:19.418919Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef9e19d87c043329d1d87d8498a72c7c","sha1":"9dd25d3b52199247d37f887760979897bc2bd45d","sha256":"51ac90b420c74cac536f94747c9ffd097c9684d1ea926ecab84f5facc25d4148","sha512":"fc206713f89987738a739ce38c59c086b55e1e7bcafdec7c48794733ae568fa8a97b26bf025e00b4ec35818561ba6089c1f49673c439ae73951cd98411b4b730","ssdeep":"","tlshash":"27d02371521d547315b00d1c396b3b45c5445128c556341b40f2108da907fe22080141","size":204,"data":"","first_seen":"2026-05-26T17:01:28.808992Z","last_seen":"2026-05-27T00:01:19.419743Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/qtFL_p7H.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5ad18e1b01dbbf4aa6a73d8430ef4f9","sha1":"d4bd109a35a1de276c0771def3ee71576c1cafe3","sha256":"4c2c7e62bafda342d4da0e5b6b7271c9f88bf029606be196f74097b6d14d6c64","sha512":"84532074929f7a8874bf0442523581bc3bb5fc80d6dd9c5e701f773977a44a053500d624326ff783de1a66648a7db60423f8bcab076b98c263ad44db22867a11","ssdeep":"3072:LoHYi8FnlvrqCsH90H9dHWi4mUvZaB07xX00C0eytx/FIKWV8fw:VPqKTHWi4nxX0aeytb/WV8Y","tlshash":"340438e43192b07203e60ae1507b1006f2792965384ed4d4f26cecef396795a91bbfbd","size":188539,"data":"","first_seen":"2026-05-26T17:01:28.771156Z","last_seen":"2026-05-27T00:01:19.395182Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/Gg5osamM.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"introduction_type":"importedModule","is_inline":false,"md5":"f11752885aebd5a3803820d9e2ba2b7b","sha1":"d11baba598ba07e4c053e63c489d30328cdcad69","sha256":"5183bfa518652711c0e1441afd5557ca6fd35601f0bc7a0d34ee5d17e4ae1490","sha512":"382a22e8634a584ab00f94447168bc78c010a379d751075484021038b98f5edd8b844bd01b0afe588254682af0e476f84817d3a8d3513725feada78f61482ad6","ssdeep":"96:AWTmkUY79tRBjEmapboJsPPTgGCh2fzITKiKtNaaVwOnBNXS51M0DfDKrfD2YuzZ:3bt7/RB4D1+YsTK/tAaVwOPi5WGlzWB+","tlshash":"e9b10a08b2a694fc63a759f0b6d6b579b13c2a59f2848045b7b454a23631cfc8333638","size":5531,"data":"","first_seen":"2026-05-26T17:01:28.75031Z","last_seen":"2026-05-27T00:01:19.385291Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/DVUf0sdK.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"introduction_type":"importedModule","is_inline":false,"md5":"6cfa8a89b1cd0a3eb6ea49f5dfe8d41d","sha1":"b8dfcc4cac284fb49f2f8e568ca60adbfff7a826","sha256":"dbd9b14e23e23b56d837f2aed1c286c8cb7f4648bebafd1de871e378317bd199","sha512":"bc9c4018defc379d332f656d15116b28b67f2ff6fd95d3ac8328f0b31b125c53be046fa1173d73ae65b7d92d3fcbd32329706a8e01301da1f6f09f27a7db561f","ssdeep":"192:tQ5JSH0My/FuGkAoMmxCBLL7YUeXX+Ehx2j1eGIjAmY1g12v:tQ5JSUMyNuGkvCBLv9wXNjEeZjDWuC","tlshash":"3cf194a5b19563b102f13cf0a536c996e3a32a743ce8c0e2294dc8773552846b6e773e","size":7771,"data":"","first_seen":"2026-05-26T17:01:28.739433Z","last_seen":"2026-05-27T00:01:19.402307Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/DLXuCdQ6.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6956d99b1aa3a31fb9a8c2f396e33cf","sha1":"40219d8d4eeb9f5e008cc6d9c41950b3a2b02ca6","sha256":"d6fdc9d81b0ac1920a771425be286b8d9957fdba3aa12f8b987cdd8522acc291","sha512":"6d82c195eec231f1f02ce2af32367a564727ecac6ccd0684c1ab584bdc274ce7bbb4812012940885eb6daea0fb8e560ea1d0c4444fbfd12fde64aa621504d5df","ssdeep":"384:aZN+906p2y7Y8AXYPNFH8RTWw7nNZH3/j1VfZiQYNN8r0LQShHkQ63wYuyq2W8O2:QsYlVfZiQY40LQShHZ6+jzhrCOKFX","tlshash":"2613f32505260cfd2fdd6ee4b0e3171e84ec0ba64be817f78d9ded84a249bd4d88191e","size":43202,"data":"","first_seen":"2026-05-26T17:01:28.760521Z","last_seen":"2026-05-27T00:01:19.38347Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/CxwJFy5A.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"introduction_type":"importedModule","is_inline":false,"md5":"a15296954d27654a0647a05c2bfbcafe","sha1":"b9917fa7dd10f2b9fb4f9ca893608f62e369dd57","sha256":"51ce66d9085c94c987af0053081d34b75f1a6b97c8f147a67e1f6f4001414556","sha512":"f350071d33c7fea4e64c0b6c02352412b519980ec76b25fa106c1972fa5357308115a9505c4a127d24e94eee1c3ea6081414cb18d2ce5d7609f5bab8fbbc3dd5","ssdeep":"","tlshash":"5fe0ab6e3181a039a30909b10072a090236e338c317886c2f258489339be079877bc0c","size":411,"data":"","first_seen":"2026-05-26T17:01:28.741418Z","last_seen":"2026-05-27T00:01:19.396901Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/DMm2JOVU.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.305Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/DMm2JOVU.js HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/_nuxt/qtFL_p7H.js\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 153605\r\nConnection: keep-alive\r\ncache-control: public, max-age=31536000, immutable\r\nVary: Accept-Encoding\r\nETag: \"25805-Z3r0YDSPUNMfBXCNJixHxi725+s\"\r\nLast-Modified: Wed, 13 May 2026 18:13:58 GMT\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4612455,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4a0fd461ed921639187788a4fb945935","sha1":"98ad69be64a690bf4348e784c1f8e5ad3814625a","sha256":"32c31eeecbffb02061679eb8611a6af929916b20dd07314892e6163a92c7eafd","sha512":"209b31b90b8292c7b6248fd0d3a5cbc41b18f24fd74b2cbe92369672b8d150ff493d943ffac7cf0141aff69738a29e129a88cd32153077910b8b871169dea22e","ssdeep":"3072:rnMece5eFePeyeLe2RZeDTeBeEeNe5eFs:/s","tlshash":"102504523141a9f6f7651f8ec0da73db648830e0a89dd9c2fa69d63cc81e01def24e56","first_seen":"2026-05-26T17:01:28.753909Z","last_seen":"2026-05-27T00:01:19.373976Z","times_seen":4,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/bbw-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.312Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /bbw-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457 HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Page not found\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: no-cache\r\nx-powered-by: Nuxt\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nX-XSS-Protection: 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Page not found","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7159,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7159), with no line terminators","md5":"f3c418d60f21fb05b3541a8be9955304","sha1":"29278b503f8cfdbceae4e54291a2b3ba54d1fad8","sha256":"ba27abce50b302d546187a9c383f4c6b540f84e01a63e44de3c5cb4921cfc9a9","sha512":"53f9bdca3f88c8aac1594191d3b51c24c9b8ceed34c36b318e71795c9becaad12159f4b93ffb86364b7d8a01a8db5b4a29517c913a7d688cc3c5b53ef1c2fda2","ssdeep":"96:gAmnzU6RNqqO9VRa9bN1T+ukBOpOunQxgxPgu5JK6sSIWoOt33ed:gXXq1zRa9r1Kgx1sOx3c","tlshash":"6ce1a6987d8854259fb349aff0e9b70884d873d2df038cd661da27449ec6a9f3842f06","first_seen":"2026-05-26T17:01:28.772452Z","last_seen":"2026-05-27T00:01:19.375355Z","times_seen":4,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":261,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/JaWt8-LI.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.589Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/JaWt8-LI.js HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/_nuxt/DMm2JOVU.js\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 11349\r\nConnection: keep-alive\r\ncache-control: public, max-age=31536000, immutable\r\nVary: Accept-Encoding\r\nETag: \"2c55-ndHjOQqeVT8XeYwq/zSInCPSDxI\"\r\nLast-Modified: Wed, 13 May 2026 18:13:57 GMT\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46782,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (46781)","md5":"c3bd4239e958f1988f6ccdb7825f240a","sha1":"8b96ea8f695c1118586573512e269fa0f5907bb8","sha256":"f8cfe150504b974b27fca04f048124caf7326b2ba14a8bc453974a2a639f8d61","sha512":"65595f1895399fd260af3096d2aed117f9c84fc972e991b134e6c47f85733744ed0c1e6a1d1e26e3d207fd05f501185dba03aaef8b14d0fe9244c38f4895505e","ssdeep":"768:FN2J+NW7Uaz3ze1+OLEmwwUrvg4srhiVU7n6Vd0GwtK:FN2+NW7U43ze1nBUjg4aYVU76Vd0GwtK","tlshash":"a623fe0a910e9c3fb5c8f75d1cb03d8c4c8d30157380a9bbab5cd9dd46967e4a72ba86","first_seen":"2026-05-26T17:01:28.725014Z","last_seen":"2026-05-27T00:01:19.378949Z","times_seen":4,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/builds/meta/4e406dd6-57a1-404e-a585-8556b1ef7457.json","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:50.220Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/builds/meta/4e406dd6-57a1-404e-a585-8556b1ef7457.json HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:50 GMT\r\nContent-Type: application/json\r\nContent-Length: 88\r\nConnection: keep-alive\r\ncache-control: public, max-age=31536000, immutable\r\nETag: \"58-NcVL0CV+cpy+tcuww18mishyvMg\"\r\nLast-Modified: Wed, 13 May 2026 18:13:57 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b95cc737d865a19bbfa6e9d88d3f9151","sha1":"35c54bd0257e729cbeb5cbb0c35f268ac872bcc8","sha256":"c38befc842349a13d985b7d8a1e330122e1d4b703a6addf7cb2bda439ae39b6d","sha512":"c0eb09543919fdd822d1efbd55269819416b2e251c876eab36a5fbca1f2f7bb2d7d1670d8ca5e6370b43ea91daa2fe10da6ec6e8fc6c1f477043e3f682425b0a","ssdeep":"","tlshash":"a1b01231014f2030c3320024c1004f41540e51030d9a2c1f4118195007447ab385c413","first_seen":"2026-05-26T17:01:28.777988Z","last_seen":"2026-05-27T00:01:19.3802Z","times_seen":4,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/img/0Owalfjho2Zdm1XzCYtFPJ7HgXi4gbsxUZF1823Lk70/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/leah_cutie-onlyfinder-20260416201127.webp","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.683Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/0Owalfjho2Zdm1XzCYtFPJ7HgXi4gbsxUZF1823Lk70/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/leah_cutie-onlyfinder-20260416201127.webp HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 17170\r\nConnection: keep-alive\r\nCDN-PullZone: 5401652\r\nCDN-RequestCountryCode: IS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nContent-Security-Policy: script-src 'none'\r\nX-Request-ID: q9Xp2qbpTo8s83_66jE1l\r\nContent-Disposition: inline; filename=\"leah_cutie-onlyfinder-20260416201127.webp\"\r\nCDN-ProxyVer: 1.53\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 200\r\nCDN-CachedAt: 05/18/2026 19:55:00\r\nCDN-EdgeStorageId: 1198\r\nCDN-RequestId: 67a6c930f3ff8bc085836ec9f53c0847\r\nCDN-Cache: MISS\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nCache-Control: public, max-age=31536000, immutable, public, max-age=2592000, immutable\r\nX-Cache: HIT, HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17170,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"11d9b5aa32b4f49346b9864ef7907261","sha1":"11a5fa78ee4c8d930f3afac2036ab3abfb8f5114","sha256":"dadf5220c04054788eee78a2f5fa6020f7b24f809df9f5ec6bf8116c80f7a50e","sha512":"fad86211c2807895816f415f4a4bcbc64afbce9071e6ddb211ca563ab73daddb8737a17eef91197a6c56c79eac96e4633b979fe159b0c57eaae3a15d08c363be","ssdeep":"384:Kik2bG7o1GOyMtJsxx8QuyLq5WRenM2eVWS09ARkeOIbgyCTravk+u:KXR7lOyQJs/DucNTVAGGlT2v8","tlshash":"2b72d113efa2ec3da757593e839fe0ed691d31c87350669d714e2b02aa721081278d5f","first_seen":"2026-05-26T17:01:28.758086Z","last_seen":"2026-05-27T00:01:19.381399Z","times_seen":4,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":40,"dns":1,"connect":54,"send":0,"wait":54,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/img/tJ2zbbP2JUWPU5t6UTMQAI956MCSNWTCiSGVUZp90Ik/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/zoebubbly-onlyfinder-20260424030000.webp","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.684Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/tJ2zbbP2JUWPU5t6UTMQAI956MCSNWTCiSGVUZp90Ik/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/zoebubbly-onlyfinder-20260424030000.webp HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 12448\r\nConnection: keep-alive\r\nCDN-PullZone: 5401652\r\nCDN-RequestCountryCode: IS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nContent-Security-Policy: script-src 'none'\r\nX-Request-ID: adcVs_RMlbG3v9ltKSBZG\r\nContent-Disposition: inline; filename=\"zoebubbly-onlyfinder-20260424030000.webp\"\r\nCDN-ProxyVer: 1.53\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 200\r\nCDN-CachedAt: 05/25/2026 11:27:24\r\nCDN-EdgeStorageId: 1198\r\nCDN-RequestId: 7379ed9f4452d1ca1e3188904b6850fb\r\nCDN-Cache: MISS\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nCache-Control: public, max-age=31536000, immutable, public, max-age=2592000, immutable\r\nX-Cache: HIT, HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12448,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b9a37eed38668b28fe638691d591d6ef","sha1":"8f3ec086685fdb12ae70baacce47254f7ccfaeda","sha256":"2d63da5ff242067777fca5ae90be3bf94d9937f129b31112c940c7712fcc4f4b","sha512":"e73089833321fc83f1e939f3d6d8bb20f6bc6b3fa9e454df553e480e17a4472aa005361cc9520430d7f0ddabf955c00c618259776e9fd3a366b0eb8a09f648c4","ssdeep":"192:8ib1GpwvvKdJ4SLzentmUXJn4f8RBKuDwvGGq3OAG6VW4Qqo5i9U003jmuR34:RbNieSWkUZrqq3OAmqoCojmup4","tlshash":"4e42c057ac26a44ad32acf29cbcf331e06dbb8d38c86196a158f1d4d5c75364a52c3f4","first_seen":"2026-05-26T17:01:28.799602Z","last_seen":"2026-05-27T00:01:19.382536Z","times_seen":4,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":255,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/DLXuCdQ6.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.742Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/DLXuCdQ6.js HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 10000\r\nConnection: keep-alive\r\ncache-control: public, max-age=31536000, immutable\r\nVary: Accept-Encoding\r\nETag: \"2710-UoCOORF5amBwDfOLSSHP/lp0mCs\"\r\nLast-Modified: Wed, 13 May 2026 18:13:57 GMT\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43202,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (43200)","md5":"a6956d99b1aa3a31fb9a8c2f396e33cf","sha1":"40219d8d4eeb9f5e008cc6d9c41950b3a2b02ca6","sha256":"d6fdc9d81b0ac1920a771425be286b8d9957fdba3aa12f8b987cdd8522acc291","sha512":"6d82c195eec231f1f02ce2af32367a564727ecac6ccd0684c1ab584bdc274ce7bbb4812012940885eb6daea0fb8e560ea1d0c4444fbfd12fde64aa621504d5df","ssdeep":"384:aZN+906p2y7Y8AXYPNFH8RTWw7nNZH3/j1VfZiQYNN8r0LQShHkQ63wYuyq2W8O2:QsYlVfZiQY40LQShHZ6+jzhrCOKFX","tlshash":"2613f32505260cfd2fdd6ee4b0e3171e84ec0ba64be817f78d9ded84a249bd4d88191e","first_seen":"2026-05-26T17:01:28.760521Z","last_seen":"2026-05-27T00:01:19.38347Z","times_seen":4,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":50,"dns":1,"connect":54,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/free-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.301Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /free-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457 HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Page not found\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: no-cache\r\nx-powered-by: Nuxt\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nX-XSS-Protection: 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Page not found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7160,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7160), with no line terminators","md5":"73f1d026ba75db9bf05c902796204881","sha1":"feb37971740830c476aab60522eee9cb3570165a","sha256":"3478898d2f3169d488071e49eb519e3ed94e7b0cee2354e8f7cf725055278663","sha512":"6113a0ad8913b571d5cb98efb962f989923288e1555cc41f7137cf6dfca2635b5edcb99f004c6bb5f6dc479c07e4a5fa93a70a040c3a218c5894578e4244e65b","ssdeep":"96:gAmnzU6RNqqO9VRa9bN1T+ukBOpOunQxgxPgu5JK6sSIWoOt34ed:gXXq1zRa9r1Kgx1sOx4c","tlshash":"6ce1a6987d8854259fb349aff0e9b70884d873d2df038cd661ca27449ec6a9f3842b06","first_seen":"2026-05-26T17:01:28.802635Z","last_seen":"2026-05-27T00:01:19.384411Z","times_seen":4,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/Gg5osamM.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.744Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/Gg5osamM.js HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 2611\r\nConnection: keep-alive\r\ncache-control: public, max-age=31536000, immutable\r\nVary: Accept-Encoding\r\nETag: \"a33-d7qN5XSgKMXaKik08QyNyE5QVDU\"\r\nLast-Modified: Wed, 13 May 2026 18:13:57 GMT\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5531,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5530)","md5":"f11752885aebd5a3803820d9e2ba2b7b","sha1":"d11baba598ba07e4c053e63c489d30328cdcad69","sha256":"5183bfa518652711c0e1441afd5557ca6fd35601f0bc7a0d34ee5d17e4ae1490","sha512":"382a22e8634a584ab00f94447168bc78c010a379d751075484021038b98f5edd8b844bd01b0afe588254682af0e476f84817d3a8d3513725feada78f61482ad6","ssdeep":"96:AWTmkUY79tRBjEmapboJsPPTgGCh2fzITKiKtNaaVwOnBNXS51M0DfDKrfD2YuzZ:3bt7/RB4D1+YsTK/tAaVwOPi5WGlzWB+","tlshash":"e9b10a08b2a694fc63a759f0b6d6b579b13c2a59f2848045b7b454a23631cfc8333638","first_seen":"2026-05-26T17:01:28.75031Z","last_seen":"2026-05-27T00:01:19.385291Z","times_seen":4,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":60,"dns":0,"connect":67,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/DbeLgc1x.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.276Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/DbeLgc1x.js HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 1777\r\nConnection: keep-alive\r\ncache-control: public, max-age=31536000, immutable\r\nVary: Accept-Encoding\r\nETag: \"6f1-euQl1hytrRJvKOsaoOGdyiyE4+k\"\r\nLast-Modified: Wed, 13 May 2026 18:13:57 GMT\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3473,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3472)","md5":"b5ba74b2d97c5fcebcb1deab286c9a08","sha1":"a88c67b1548e5a78b00cf8450dc8bf4f7ab72daf","sha256":"b71a02197614f8b2b58876fa6a337137fc016e509367c0aa38a72e48e23a02ce","sha512":"fc298dfc167d62bdaba552ca17244c86056cafdca3f9b25053e24baa95011aa28febe07414f2851ed526ac6b4ce07c546cedec913da99cbf4ccc5be298cbe876","ssdeep":"","tlshash":"2e61c70d743698bf9b63249971dcb59834182bd9a5e441e037bd0c3287e5cea6223b39","first_seen":"2026-05-26T17:01:28.727267Z","last_seen":"2026-05-27T00:01:19.386177Z","times_seen":4,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/DMm2JOVU.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.277Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/DMm2JOVU.js HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 153605\r\nConnection: keep-alive\r\ncache-control: public, max-age=31536000, immutable\r\nVary: Accept-Encoding\r\nETag: \"25805-Z3r0YDSPUNMfBXCNJixHxi725+s\"\r\nLast-Modified: Wed, 13 May 2026 18:13:58 GMT\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4612455,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4a0fd461ed921639187788a4fb945935","sha1":"98ad69be64a690bf4348e784c1f8e5ad3814625a","sha256":"32c31eeecbffb02061679eb8611a6af929916b20dd07314892e6163a92c7eafd","sha512":"209b31b90b8292c7b6248fd0d3a5cbc41b18f24fd74b2cbe92369672b8d150ff493d943ffac7cf0141aff69738a29e129a88cd32153077910b8b871169dea22e","ssdeep":"3072:rnMece5eFePeyeLe2RZeDTeBeEeNe5eFs:/s","tlshash":"102504523141a9f6f7651f8ec0da73db648830e0a89dd9c2fa69d63cc81e01def24e56","first_seen":"2026-05-26T17:01:28.753909Z","last_seen":"2026-05-27T00:01:19.373976Z","times_seen":4,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":128,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.286Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457 HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: application/json;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nx-powered-by: Nuxt\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23771,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1f4a79b4ceaf50e44cb9ad1980587f0","sha1":"76db8ffdf7e21c63493d1691c9f1bf78b800d485","sha256":"74b0045ed9bd24984958765beda8cd21148f576595b905a91e3d62222c474c32","sha512":"9411426d40d3aa3ed47a6e533442ef83d3458f1dafd96098f9ea103f05536bfa642e0306ee639d60def95386e2ae7f73f15127bd64f5e3c6fe8c10c74de43af8","ssdeep":"384:wZz5Uxr0qwUZNQ4QVMMSBRKgXkkSevk38s8Jpe:wZz5JqnZtQVDSBRfkde831Oe","tlshash":"0ab285fb9604b8d2f031f521edf7ffe291d9ae25cb14096781ad72d3938058e4e8a542","first_seen":"2026-05-27T00:01:19.387137Z","last_seen":"2026-05-27T00:01:19.387137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/milf-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.308Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /milf-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457 HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Page not found\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: no-cache\r\nx-powered-by: Nuxt\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nX-XSS-Protection: 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Page not found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":7160,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7160), with no line terminators","md5":"5402976e87bd2023aa25866f411b9216","sha1":"b0218b51ed83fb9e7af4f841e8e0e8960dfef32f","sha256":"33a446eb0d1173b800104d4643c4f646ccaaf16d924e80d9380351ebb4c5eb36","sha512":"0ee811902c44506728c4d944b29d514a5db8d47ef5407a7adb46371a165f303ff078f7639b2c9714a4b76da4500338541492934eb7989c905578001128fc9c56","ssdeep":"96:gAmnzU6RNqqO9VRa9bN1T+ukBOpOunQxgxPgu5JK6sSIWoOt3ued:gXXq1zRa9r1Kgx1sOxuc","tlshash":"9fe1a7987d8854259fb349bff0e9b70884d873d2df138cd661da27449ec6a9f3842b06","first_seen":"2026-05-26T17:01:28.761803Z","last_seen":"2026-05-27T00:01:19.389918Z","times_seen":4,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":202,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/asian-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.314Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /asian-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457 HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Page not found\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: no-cache\r\nx-powered-by: Nuxt\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nX-XSS-Protection: 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Page not found","fingerprints":[{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":7161,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7161), with no line terminators","md5":"4ac981c6959af184f07e71fa2ea10c14","sha1":"50984ef16557ad69c572ab39e4c0fe7989bc7f84","sha256":"6284690e9ec3143c207084ac7922ae012cad1ea35c6169f1bf6330fb696d06d3","sha512":"9fd2c24fd87b26a0b92d305d01d7d57f4602a1a9108c3fccad9e93d6422525f124107729ea2045f652317c9d1b7caaae839166c529c8eb42c3a0c8fe86556797","ssdeep":"96:gAmnzU6RNqqO9VRa9bN1T+ukBOpOunQxgxPgu5JK6sSIWoOt3qed:gXXq1zRa9r1Kgx1sOxqc","tlshash":"f3e1a6987d8854259fb349bff0e9b70884d873d2df038cd661ca27449ec6a9f3842b06","first_seen":"2026-05-26T17:01:28.79568Z","last_seen":"2026-05-27T00:01:19.391422Z","times_seen":4,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":134,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/latina-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.314Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /latina-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457 HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Page not found\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: no-cache\r\nx-powered-by: Nuxt\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nX-XSS-Protection: 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Page not found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":7162,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7162), with no line terminators","md5":"13a9a268f4eb7b7462ec1ecb5a5380ff","sha1":"6acd15919877712d623b406672b12dbf703117a0","sha256":"5c11054561f3573d125849090d695e13150f6884fc2229b8dcd397c25f147841","sha512":"f9b088d828d4f9beb2ebaae2afcaa8c694f47990e4d881296631c79313a2704c71828e63e5389633d940754fe61cebe39844075f104c6dfcc63adbeda4dc618a","ssdeep":"96:gAmnzU6RNqqO9VRa9bN1T+ukBOpOunQxgxPgu5JK6sSIWoOt37ed:gXXq1zRa9r1Kgx1sOx7c","tlshash":"e0e1a6987d8854259fb349aff0e9b70884d873d2df038cd661da27449ec6a9f3842b06","first_seen":"2026-05-26T17:01:28.776318Z","last_seen":"2026-05-27T00:01:19.392477Z","times_seen":4,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":190,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/redhead-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.316Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redhead-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457 HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Page not found\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: no-cache\r\nx-powered-by: Nuxt\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nX-XSS-Protection: 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Page not found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":7163,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7163), with no line terminators","md5":"1e020443418bf8bd6e55198ef8ca8f4d","sha1":"65713080fd3d0be7c68fbd9d2afd13bae229792c","sha256":"5f9155addc4d414a743a3e085e6684cf3651bda2b4f2e61ad339347cb33d8c65","sha512":"876a075c6219cdb182a172be39d6e20c2425de83a0699a77fcafc41ebf7052807bb3fe4393780c9d510d5cec67dd46a64c55aed737e64cd02a45af9efc7d3ecc","ssdeep":"96:gAmnzU6RNqqO9VRa9bN1T+ukBOpOunQxgxPgu5JK6sSIWoOt3cWed:gXXq1zRa9r1Kgx1sOx7c","tlshash":"1ae1a6987d8854259fb349aff0e9b70884d873d2df038cd661de27449ec6a9f3842b06","first_seen":"2026-05-26T17:01:28.735498Z","last_seen":"2026-05-27T00:01:19.393356Z","times_seen":4,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":372,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/entry.D-0bl4GR.css","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.409Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/entry.D-0bl4GR.css HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 5164\r\nConnection: keep-alive\r\ncache-control: public, max-age=31536000, immutable\r\nVary: Accept-Encoding\r\nETag: \"142c-JsNx7zr+Vb30QOL+4EeQi5603Qc\"\r\nLast-Modified: Wed, 13 May 2026 18:13:57 GMT\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20621,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (20620)","md5":"f353996dd9ceeefd7ee618072922802b","sha1":"330eababf8f6590cc7201a25816b231af35e1d86","sha256":"7b12ef52abec14a5f0dfba41d8c8fadba8da7d87016b1e16670c55e3732d5735","sha512":"a6c191e201faedca547f25cdab8a502d345ac862f394d32597097d3352cc73b71b7093dafecc3fb27a3c091150dbea1e2bf562be49da86d9b1a50dcb32e9885c","ssdeep":"192:fqzQg1+WTmxqw/cV/k/S4243SDemeK1g8J7hfWAL44676ArfSIi2SlpNdEpxMMQI:te/MS41SDrJ7h0SIi2SlpNdHlimsL","tlshash":"c992d655b326dd7edc7358e7e39cf51ca128a086ce2066dcfb0227139ac72f50926729","first_seen":"2026-05-26T17:01:28.756726Z","last_seen":"2026-05-27T00:01:19.394301Z","times_seen":4,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/qtFL_p7H.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.411Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/qtFL_p7H.js HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 70754\r\nConnection: keep-alive\r\ncache-control: public, max-age=31536000, immutable\r\nVary: Accept-Encoding\r\nETag: \"11462-JQHNv1N89yf2IVJT+NZk40tXBCU\"\r\nLast-Modified: Wed, 13 May 2026 18:13:57 GMT\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":188539,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32914)","md5":"e5ad18e1b01dbbf4aa6a73d8430ef4f9","sha1":"d4bd109a35a1de276c0771def3ee71576c1cafe3","sha256":"4c2c7e62bafda342d4da0e5b6b7271c9f88bf029606be196f74097b6d14d6c64","sha512":"84532074929f7a8874bf0442523581bc3bb5fc80d6dd9c5e701f773977a44a053500d624326ff783de1a66648a7db60423f8bcab076b98c263ad44db22867a11","ssdeep":"3072:LoHYi8FnlvrqCsH90H9dHWi4mUvZaB07xX00C0eytx/FIKWV8fw:VPqKTHWi4nxX0aeytb/WV8Y","tlshash":"340438e43192b07203e60ae1507b1006f2792965384ed4d4f26cecef396795a91bbfbd","first_seen":"2026-05-26T17:01:28.771156Z","last_seen":"2026-05-27T00:01:19.395182Z","times_seen":4,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":63,"dns":1,"connect":65,"send":0,"wait":58,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/img/S17C0tJ9YwmTd_hA_4ICPJFy-YNeWFzcfexFWjQnCdM/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/xoxjessox-onlyfinder-20260404160211.jpg","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.686Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/S17C0tJ9YwmTd_hA_4ICPJFy-YNeWFzcfexFWjQnCdM/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/xoxjessox-onlyfinder-20260404160211.jpg HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 44538\r\nConnection: keep-alive\r\nCDN-PullZone: 5401652\r\nCDN-RequestCountryCode: IS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nContent-Security-Policy: script-src 'none'\r\nX-Request-ID: cJzMa3kXQBVR1ewPl0yBC\r\nContent-Disposition: inline; filename=\"xoxjessox-onlyfinder-20260404160211.webp\"\r\nCDN-ProxyVer: 1.53\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 200\r\nCDN-CachedAt: 05/18/2026 03:55:07\r\nCDN-EdgeStorageId: 1198\r\nCDN-RequestId: 87128ce32f08b2fbb8f54e2ba5bbf400\r\nCDN-Cache: MISS\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nCache-Control: public, max-age=31536000, immutable, public, max-age=2592000, immutable\r\nX-Cache: HIT, HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44538,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e60a39cb168c5fa79fba573b8b11acaf","sha1":"e67f9e8583c27324b67c06656b959c16801b066e","sha256":"5e9ad9cb7e3ff45c11ee2e9836edc73572d24de5b58fc4fc6f4397530cdf527f","sha512":"ad025c39d658c9273245403bce382652315b6ab80c880915cd683c0dcd39f57158c656d2f913840ada30f96c95865242df7b5b2831b3acd5021de4abe2fc48e9","ssdeep":"768:NtVzNxpWExP+bELYi89/IcQ0Ft7/oGastlSQw3aCWXwM+hs70v0GCqkhUXTfRn49:NtBNxpPxP+b89uY4wGastlSVaCK+y+0r","tlshash":"7c1302cfaaf414d4dfc422adfd0bb92c8f0a6fb8b564156b233e512a4ce4a5074218dd","first_seen":"2026-05-26T17:01:28.74582Z","last_seen":"2026-05-27T00:01:19.396005Z","times_seen":4,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":258,"dns":0,"connect":0,"send":0,"wait":67,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/CxwJFy5A.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.855Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/CxwJFy5A.js HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/_nuxt/DLXuCdQ6.js\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\nETag: W/\"19b-uZF/p90Q8rn7T5yok2CPYuNp3Vc\"\r\nLast-Modified: Wed, 13 May 2026 18:13:57 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":411,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (410)","md5":"a15296954d27654a0647a05c2bfbcafe","sha1":"b9917fa7dd10f2b9fb4f9ca893608f62e369dd57","sha256":"51ce66d9085c94c987af0053081d34b75f1a6b97c8f147a67e1f6f4001414556","sha512":"f350071d33c7fea4e64c0b6c02352412b519980ec76b25fa106c1972fa5357308115a9505c4a127d24e94eee1c3ea6081414cb18d2ce5d7609f5bab8fbbc3dd5","ssdeep":"","tlshash":"5fe0ab6e3181a039a30909b10072a090236e338c317886c2f258489339be079877bc0c","first_seen":"2026-05-26T17:01:28.741418Z","last_seen":"2026-05-27T00:01:19.396901Z","times_seen":4,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/best-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.298Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /best-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457 HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Page not found\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: no-cache\r\nx-powered-by: Nuxt\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nX-XSS-Protection: 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Page not found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":7160,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7160), with no line terminators","md5":"5043a125920888f3c2c5315113fc4a7c","sha1":"4e01b43e0357f8fc0b89ca30e12dc134beced423","sha256":"14aeb603a867037b195d125d3ee904a33640c451ced42fc3d772c198945ded63","sha512":"4d79529ea92ed55b44f71f6359da01d85408fe86968c81601e2dd513903121fe6de1ca20206cecb42f1b031fd020711f9979e9c334cca5477af15328b95fd30d","ssdeep":"96:gAmnzU6RNqqO9VRa9bN1T+ukBOpOunQxgxPgu5JK6sSIWoOt3oed:gXXq1zRa9r1Kgx1sOxoc","tlshash":"07e196987d8854259fb349aff0e9b70c84d873d2df038cd661ca27449ec6a9f3842b06","first_seen":"2026-05-26T17:01:28.744189Z","last_seen":"2026-05-27T00:01:19.398182Z","times_seen":4,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/lesbian-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.318Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /lesbian-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457 HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Page not found\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: no-cache\r\nx-powered-by: Nuxt\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nX-XSS-Protection: 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Page not found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":7163,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7163), with no line terminators","md5":"231bf0b00a5a413afc26aaca2979d94b","sha1":"aa195ba11ffeb19031496732231bed555149c501","sha256":"d7693963775357b5b6af5c6d43becca33a713ce8a098ffd6b922f91f4281d42e","sha512":"7c21310bd5fef388014b369c27fa1de0f1eec107759908684c4c2ee7b9f7d3cc5dad293a70db6de1ae6a4777be7cc7609e65d466aadc78061cd3710edb53f1e6","ssdeep":"96:gAmnzU6RNqqO9VRa9bN1T+ukBOpOunQxgxPgu5JK6sSIWoOt3Qed:gXXq1zRa9r1Kgx1sOxQc","tlshash":"a6e1a6987d8854259fb349bff0e9b70884d873d2df138cd661ca27449ec6a9f3842b06","first_seen":"2026-05-26T17:01:28.79803Z","last_seen":"2026-05-27T00:01:19.399091Z","times_seen":4,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":372,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/img/WMocg2GbGcUX6D5IvXQxHnT1d8xEdpiK64qbBz6wZHY/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/naaomixx-onlyfinder-20260317145923.jpg","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.694Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/WMocg2GbGcUX6D5IvXQxHnT1d8xEdpiK64qbBz6wZHY/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/naaomixx-onlyfinder-20260317145923.jpg HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 38190\r\nConnection: keep-alive\r\nCDN-PullZone: 5401652\r\nCDN-RequestCountryCode: IS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nContent-Security-Policy: script-src 'none'\r\nX-Request-ID: f9GBPMFWTmBjSoph1TvHF\r\nContent-Disposition: inline; filename=\"naaomixx-onlyfinder-20260317145923.webp\"\r\nCDN-ProxyVer: 1.53\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 200\r\nCDN-CachedAt: 05/20/2026 21:44:12\r\nCDN-EdgeStorageId: 1198\r\nCDN-RequestId: 413b216a91c07926db68931152f30549\r\nCDN-Cache: MISS\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nCache-Control: public, max-age=31536000, immutable, public, max-age=2592000, immutable\r\nX-Cache: HIT, HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9ec1fc3d9f7b5a05af846e3b3f10065a","sha1":"0b7a2c8a4984adbfddaccad26070e32698bcae26","sha256":"1e5ee3345c5eafed572eb3d86b7174f729dc4bff79d077fae9738c4bcf863372","sha512":"88c2cdb7a687d1ef9857506bbfd440b52ddc63b914a7b0f25534a40d6b73ce3331ff2e13c74bfc791c38eaeec305c9ce5ed96ac89161961d0883d0a363a64412","ssdeep":"768:09SI+kczTsA5ThgenLaQ3D7BdB9arQ/I93hyt6rVZgmnd+GSy8WXw4pMd:6SrRzgyOkLa09WsA3oWVZgmg8XPpMd","tlshash":"7303f221536dab9c943968accbb58ec7652c1581c24fe7b6214432d74887e07f48ccdf","first_seen":"2026-05-27T00:01:19.399885Z","last_seen":"2026-05-27T00:01:19.399885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":140,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/DVUf0sdK.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.858Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/DVUf0sdK.js HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/_nuxt/DLXuCdQ6.js\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 2940\r\nConnection: keep-alive\r\ncache-control: public, max-age=31536000, immutable\r\nVary: Accept-Encoding\r\nETag: \"b7c-cbVlp4+aOZzNgIRjWZWl8rMXlMA\"\r\nLast-Modified: Wed, 13 May 2026 18:13:57 GMT\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7771,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7770)","md5":"6cfa8a89b1cd0a3eb6ea49f5dfe8d41d","sha1":"b8dfcc4cac284fb49f2f8e568ca60adbfff7a826","sha256":"dbd9b14e23e23b56d837f2aed1c286c8cb7f4648bebafd1de871e378317bd199","sha512":"bc9c4018defc379d332f656d15116b28b67f2ff6fd95d3ac8328f0b31b125c53be046fa1173d73ae65b7d92d3fcbd32329706a8e01301da1f6f09f27a7db561f","ssdeep":"192:tQ5JSH0My/FuGkAoMmxCBLL7YUeXX+Ehx2j1eGIjAmY1g12v:tQ5JSUMyNuGkvCBLv9wXNjEeZjDWuC","tlshash":"3cf194a5b19563b102f13cf0a536c996e3a32a743ce8c0e2294dc8773552846b6e773e","first_seen":"2026-05-26T17:01:28.739433Z","last_seen":"2026-05-27T00:01:19.402307Z","times_seen":4,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/_...CGNFgqs0.css","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.262Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/_...CGNFgqs0.css HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 533\r\nConnection: keep-alive\r\ncache-control: public, max-age=31536000, immutable\r\nVary: Accept-Encoding\r\nETag: \"215-VqmsonOoSGbjxyZCOMwh/lkAEb4\"\r\nLast-Modified: Wed, 13 May 2026 18:13:57 GMT\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1149,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1148)","md5":"f433a1a3f8a284c01f657b9936ee5a4b","sha1":"11f959072bd771daac9ee461a17302494c3de203","sha256":"ea954a77628b82cb15f88fff4cba7c69ff7f2a6b507ecad3407d43304cf19c59","sha512":"3bc1680abb6e98e58abb5ba9ff2788fb7b407b17638f21dbf0d3463491587533f899fdadf8d41669b3677d3c13dc9aa162186f0569a4a8e431bc10f78ddc8273","ssdeep":"","tlshash":"5e2111b66405393929afcb4ed18063ded3516533e9921dcde22a81379ccb7e33d04e24","first_seen":"2026-05-26T17:01:28.75149Z","last_seen":"2026-05-27T00:01:19.403208Z","times_seen":4,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.291Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457 HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: application/json;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nx-powered-by: Nuxt\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23771,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1f4a79b4ceaf50e44cb9ad1980587f0","sha1":"76db8ffdf7e21c63493d1691c9f1bf78b800d485","sha256":"74b0045ed9bd24984958765beda8cd21148f576595b905a91e3d62222c474c32","sha512":"9411426d40d3aa3ed47a6e533442ef83d3458f1dafd96098f9ea103f05536bfa642e0306ee639d60def95386e2ae7f73f15127bd64f5e3c6fe8c10c74de43af8","ssdeep":"384:wZz5Uxr0qwUZNQ4QVMMSBRKgXkkSevk38s8Jpe:wZz5JqnZtQVDSBRfkde831Oe","tlshash":"0ab285fb9604b8d2f031f521edf7ffe291d9ae25cb14096781ad72d3938058e4e8a542","first_seen":"2026-05-27T00:01:19.387137Z","last_seen":"2026-05-27T00:01:19.387137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/DbeLgc1x.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.293Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/DbeLgc1x.js HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/_nuxt/qtFL_p7H.js\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 1777\r\nConnection: keep-alive\r\ncache-control: public, max-age=31536000, immutable\r\nVary: Accept-Encoding\r\nETag: \"6f1-euQl1hytrRJvKOsaoOGdyiyE4+k\"\r\nLast-Modified: Wed, 13 May 2026 18:13:57 GMT\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3473,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3472)","md5":"b5ba74b2d97c5fcebcb1deab286c9a08","sha1":"a88c67b1548e5a78b00cf8450dc8bf4f7ab72daf","sha256":"b71a02197614f8b2b58876fa6a337137fc016e509367c0aa38a72e48e23a02ce","sha512":"fc298dfc167d62bdaba552ca17244c86056cafdca3f9b25053e24baa95011aa28febe07414f2851ed526ac6b4ce07c546cedec913da99cbf4ccc5be298cbe876","ssdeep":"","tlshash":"2e61c70d743698bf9b63249971dcb59834182bd9a5e441e037bd0c3287e5cea6223b39","first_seen":"2026-05-26T17:01:28.727267Z","last_seen":"2026-05-27T00:01:19.386177Z","times_seen":4,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/teen-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.311Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /teen-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457 HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Page not found\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: no-cache\r\nx-powered-by: Nuxt\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nX-XSS-Protection: 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Page not found","fingerprints":[{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7160,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7160), with no line terminators","md5":"71db8b37a675583688d747979aa7bbe2","sha1":"e1dab9743e2bbb3ef815ebd918525982d8a63928","sha256":"0a9daec66ccc1ad8ab8d365f78c5d949922f1cdb473b74156ccb556eabaf9073","sha512":"1b088d88e0d9f257848abfaca6bc20c7104c9bf8966829d5093fbd400c54e22fc930f4fcc24a437a594506d6c37b69836f58485ada93a45d01c0c1d304847c0b","ssdeep":"96:gAmnzU6RNqqO9VRa9bN1T+ukBOpOunQxgxPgu5JK6sSIWoOt3ued:gXXq1zRa9r1Kgx1sOxuc","tlshash":"fae1a7987d8854259fb349aff0e9b70884d873d2df038cd661da27449ec6a9f3842b06","first_seen":"2026-05-26T17:01:28.76432Z","last_seen":"2026-05-27T00:01:19.40394Z","times_seen":4,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/blonde-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.315Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /blonde-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457 HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Page not found\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: no-cache\r\nx-powered-by: Nuxt\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nX-XSS-Protection: 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Page not found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":7162,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7162), with no line terminators","md5":"97f309c403549eeddacd0354dbc69242","sha1":"f5369dbf8af484c382839eb5dc67f810d1b70bee","sha256":"3ddaa85d4d23382cf5a06e0107c059a31de8939ba51f9d24c980922928c220a6","sha512":"786a6561dfda17b9981e29663f1e728096bdff389febe46a408a49e72f7a6ba7f30025d777e96b80f2b7e0eb80faf974a4148ab8d42ae3774de4a2ba09c107f9","ssdeep":"96:gAmnzU6RNqqO9VRa9bN1T+ukBOpOunQxgxPgu5JK6sSIWoOt3Wed:gXXq1zRa9r1Kgx1sOxWc","tlshash":"5de196987d8854259fb349aff0e9b70884d873d2df038cd661da27449ec6a9f3842b06","first_seen":"2026-05-26T17:01:28.729047Z","last_seen":"2026-05-27T00:01:19.405078Z","times_seen":4,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":229,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohomesteading.com/","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T00:00:47.983Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":121,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T00:00:48.187Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Wed, 27 May 2026 00:00:42 GMT\r\netag: W/\"LNG1asLq8D\"\r\ncache-control: stale-while-revalidate\r\nx-powered-by: Nuxt\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":121628,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18049)","md5":"c68d341521c9a85ebc383ed9c56eab6d","sha1":"4c0de2a61e270c3d1b0e229a1a93fd7a6f044e07","sha256":"2cd1b56ac2eaf0364d4edea025e7af6cc14ce2bfa75f76ae5f687f8c760baeb4","sha512":"79722267fbaec88f2add6755ee3653037eb7cefc6683e5c35d16d52e71f9f7d11c487e3962446d529d8fe0fa551f8d9707e2363785e845d6ad4854fd8589e9ef","ssdeep":"768:7gxb2dIZltY3j87NMAAudirGta2udZ4iYmwAv8B0ld8l075S8JH22Gx6f8BM6v9m:7g8iaj+g4ky5wSADoXxd+5AlkM1w","tlshash":"0ec38662e160647ea533ae6c9ff8dfadf13e7618eb444a58b77900e31385de81827074","first_seen":"2026-05-27T00:01:19.406418Z","last_seen":"2026-05-27T00:01:19.406418Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":44,"dns":0,"connect":54,"send":0,"wait":73,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/img/gEXrc26UPubbOuoHCjvQkKW4-KKDwuLQ_cNIV78tfas/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/kimchiee-onlyfinder-20260416200926.webp","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.680Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/gEXrc26UPubbOuoHCjvQkKW4-KKDwuLQ_cNIV78tfas/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/kimchiee-onlyfinder-20260416200926.webp HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 17642\r\nConnection: keep-alive\r\nCDN-PullZone: 5401652\r\nCDN-RequestCountryCode: IS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nContent-Security-Policy: script-src 'none'\r\nX-Request-ID: fP_45l6R-MU1Ekf3go_-a\r\nContent-Disposition: inline; filename=\"kimchiee-onlyfinder-20260416200926.webp\"\r\nCDN-ProxyVer: 1.53\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 200\r\nCDN-CachedAt: 05/20/2026 21:38:24\r\nCDN-EdgeStorageId: 1198\r\nCDN-RequestId: 6930eb3da1736a1e0627df212cd2706d\r\nCDN-Cache: MISS\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nCache-Control: public, max-age=31536000, immutable, public, max-age=2592000, immutable\r\nX-Cache: HIT, HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17642,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3c2cc03f0ff5024fe8260e045c6c21c","sha1":"edb04c3c9e49d61e98a940ff89227ae82c56bda1","sha256":"a25f56bab29cbd02b5019305c5e8f50b46f699ea6388a5f0b3c8e8814624198b","sha512":"aa815f9f9d58390c22cf936d0cfe8403b5f8335b529b6af2c39fdb3ebdda262d092a4425d2dc426b062186c5d2999852226be968ade7bba55387b56ac747c339","ssdeep":"384:P6QjbKJtFYM4P9+pBR9pshAzhSp2y3QLvPVqwR78MSpswP7sS:PhbKJtFYM4PopBR9psh4ShcQwWMcsWL","tlshash":"cc82b05bb8084466d3790bb8d212fa78948090dddc3596f9e8a73b2c861adf4c93bd44","first_seen":"2026-05-26T17:01:28.773635Z","last_seen":"2026-05-27T00:01:19.407967Z","times_seen":4,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/img/dvbSa0iwyTojNQltswncJlL8CrBuzL7V8FAfXZ0-l9A/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/emma-me-onlyfinder-20260404160306.jpg","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.681Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/dvbSa0iwyTojNQltswncJlL8CrBuzL7V8FAfXZ0-l9A/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/emma-me-onlyfinder-20260404160306.jpg HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 17778\r\nConnection: keep-alive\r\nCDN-PullZone: 5401652\r\nCDN-RequestCountryCode: IS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nContent-Security-Policy: script-src 'none'\r\nX-Request-ID: J3NiYzfLWiz-KL5OHujmc\r\nContent-Disposition: inline; filename=\"emma-me-onlyfinder-20260404160306.webp\"\r\nCDN-ProxyVer: 1.53\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 200\r\nCDN-CachedAt: 05/20/2026 16:04:40\r\nCDN-EdgeStorageId: 1198\r\nCDN-RequestId: 91568bf3a87bd0c2c15c913355410a77\r\nCDN-Cache: MISS\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nCache-Control: public, max-age=31536000, immutable, public, max-age=2592000, immutable\r\nX-Cache: HIT, HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17778,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"960e0c5d746fe0cbc89a91a494211ec4","sha1":"1369634d9e3d49f281aaca51bd498d8f71af8661","sha256":"261a7fed3ef8312ab1c9cc4e1a488ed4b9017310600713dcd15894dfbd4fd12b","sha512":"7fd81ccb4b2f506e1623664bab6c9530b31344b6f4ce1df88d1a6df20d1c60ae2d992b78e68c3a23fe1d95a6a6820933693cf6d2566f2bcc13e6a5d2b07ccacb","ssdeep":"384:UHBCEJQI/KwV82G6GnCLNNECqBwnA26i4C3mcG2gpFXDzYaeMZ0U3HBjv:UaIDJJGun6tAmpnbDzYa8oj","tlshash":"0e82e0817e21aef63e4320bc29439e10424997378259ddb0dde016382b21f767b9f397","first_seen":"2026-05-26T17:01:28.766135Z","last_seen":"2026-05-27T00:01:19.408671Z","times_seen":4,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":166,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/img/hjKdSxpeUqSBWL9cz1rlI1xLv5hUa2_hu0TJJpntjYQ/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/katiethekutiekat-onlyfinder-20260317145922.jpg","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.691Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/hjKdSxpeUqSBWL9cz1rlI1xLv5hUa2_hu0TJJpntjYQ/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/katiethekutiekat-onlyfinder-20260317145922.jpg HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 105512\r\nConnection: keep-alive\r\nCDN-PullZone: 5401652\r\nCDN-RequestCountryCode: IS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nContent-Security-Policy: script-src 'none'\r\nX-Request-ID: vsXJSQBo3j4KWoe-NURla\r\nContent-Disposition: inline; filename=\"katiethekutiekat-onlyfinder-20260317145922.webp\"\r\nCDN-ProxyVer: 1.53\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 200\r\nCDN-CachedAt: 05/23/2026 21:34:44\r\nCDN-EdgeStorageId: 1198\r\nCDN-RequestId: a6e6ce11bf181e1661e5e9dad392b167\r\nCDN-Cache: MISS\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nCache-Control: public, max-age=31536000, immutable, public, max-age=2592000, immutable\r\nX-Cache: HIT, HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105512,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"389310401a5307d6c656074a7a2af9a8","sha1":"95963156472a5abdc4d22d596a6920cecdf7e730","sha256":"811a3294d3df7f0e725cfc55d52fe7488c7d46af31321c3289c095552c1e779f","sha512":"bbb3b6106960d81aa5104cbf117ba710d4cb7c8828384f9b64d8504c011ed4c37bed8a74936d316aedfc90f520043344e5d01cbe438174292c4c07633f63516c","ssdeep":"1536:o8k/HDg3IujCLxD+aqfwCet9GN6BRGB+waCQUk55p54RBqEzJhK+5ht4tEKPb:q/jgYujCLxD+aqfHmrGUvnMhzy+jrKPb","tlshash":"c7a312635182856bd3b1c43e02d09c649de69dd3c95c7737b8a3cc0d8a8da35fa8636e","first_seen":"2026-05-26T17:01:28.767993Z","last_seen":"2026-05-27T00:01:19.40935Z","times_seen":4,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":54,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/img/pH0vrtFu7VjH_KDUc89N1KJqsRbVjZYAQDFZGoBikeg/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/itsbabyybella-onlyfinder-20260404160226.jpg","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.692Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/pH0vrtFu7VjH_KDUc89N1KJqsRbVjZYAQDFZGoBikeg/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/itsbabyybella-onlyfinder-20260404160226.jpg HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 111260\r\nConnection: keep-alive\r\nCDN-PullZone: 5401652\r\nCDN-RequestCountryCode: IS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nContent-Security-Policy: script-src 'none'\r\nX-Request-ID: SBcUpePE_juESdJRySl7o\r\nContent-Disposition: inline; filename=\"itsbabyybella-onlyfinder-20260404160226.webp\"\r\nCDN-ProxyVer: 1.53\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 200\r\nCDN-CachedAt: 05/20/2026 21:44:15\r\nCDN-EdgeStorageId: 1198\r\nCDN-RequestId: 0b4f17eac6cd674349407152aa3246f5\r\nCDN-Cache: MISS\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nCache-Control: public, max-age=31536000, immutable, public, max-age=2592000, immutable\r\nX-Cache: HIT, HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b26ad3d18f53ad2659c15fdcdea30d52","sha1":"0388f064e2f004b7223a46a86a4b10c0b5c61745","sha256":"f627be6f3bc635de32642a798a9504d9b8a8fc0beba0e45e4d09b03ed75a953e","sha512":"596dcf388a580bc7fdcdb2f2e904121f0004417f21911c3c8bd80b94c17a0bcfe5321551dc6cb94ad9504b61ed68856bff4a4bba643fd7cf198315377691acd5","ssdeep":"3072:wFKv+3xcOHnLIIEDrAXBTzEtdFtWzK+5EtX1:wF40xKIeART+","tlshash":"b7b312fe3370628cf1866df1beaabb7500feb6c0d726cc504129a47729d1192f950e99","first_seen":"2026-05-26T17:01:28.719488Z","last_seen":"2026-05-27T00:01:19.41Z","times_seen":4,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":68,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/JaWt8-LI.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.278Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/JaWt8-LI.js HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 11349\r\nConnection: keep-alive\r\ncache-control: public, max-age=31536000, immutable\r\nVary: Accept-Encoding\r\nETag: \"2c55-ndHjOQqeVT8XeYwq/zSInCPSDxI\"\r\nLast-Modified: Wed, 13 May 2026 18:13:57 GMT\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46782,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (46781)","md5":"c3bd4239e958f1988f6ccdb7825f240a","sha1":"8b96ea8f695c1118586573512e269fa0f5907bb8","sha256":"f8cfe150504b974b27fca04f048124caf7326b2ba14a8bc453974a2a639f8d61","sha512":"65595f1895399fd260af3096d2aed117f9c84fc972e991b134e6c47f85733744ed0c1e6a1d1e26e3d207fd05f501185dba03aaef8b14d0fe9244c38f4895505e","ssdeep":"768:FN2J+NW7Uaz3ze1+OLEmwwUrvg4srhiVU7n6Vd0GwtK:FN2+NW7U43ze1nBUjg4aYVU76Vd0GwtK","tlshash":"a623fe0a910e9c3fb5c8f75d1cb03d8c4c8d30157380a9bbab5cd9dd46967e4a72ba86","first_seen":"2026-05-26T17:01:28.725014Z","last_seen":"2026-05-27T00:01:19.378949Z","times_seen":4,"resource_available":true,"data":null}},"time_used":408,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":346,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/img/gggi4TctFu8X5WespwO-241KyoVlloR1kFpL2zpFjZg/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/marian_reder-onlyfinder-20260404160249.jpg","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.687Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/gggi4TctFu8X5WespwO-241KyoVlloR1kFpL2zpFjZg/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/marian_reder-onlyfinder-20260404160249.jpg HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 22868\r\nConnection: keep-alive\r\nCDN-PullZone: 5401652\r\nCDN-RequestCountryCode: IS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nContent-Security-Policy: script-src 'none'\r\nX-Request-ID: JzcckChTL6AlE-VNlA31E\r\nContent-Disposition: inline; filename=\"marian_reder-onlyfinder-20260404160249.webp\"\r\nCDN-ProxyVer: 1.53\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 200\r\nCDN-CachedAt: 05/22/2026 17:30:14\r\nCDN-EdgeStorageId: 1198\r\nCDN-RequestId: 95131119142abd00a0e52e19324753ca\r\nCDN-Cache: MISS\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nCache-Control: public, max-age=31536000, immutable, public, max-age=2592000, immutable\r\nX-Cache: HIT, HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22868,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eabf62b8cf03e4867c992638c09f5574","sha1":"7bd81a6e79f9c100968bd8820b32b2c16d7a6e4e","sha256":"fac9c79797f813d3ad36672bd5d5cb1ed702b0759fadb36a0ddf693ced987088","sha512":"184f17325acd5f4be6bd51071e00895cacee67bcae4ad85da74852959c3ece2415847d8e24d3cbf88f7dfed94a591e64c2fc6d93e4cee7f6ef0ea30924703f0a","ssdeep":"384:RghJbnWGU45W2IFPVall29qYc2MyBbWEENNEo1OQ2v4UYiPx3O8RCS7v:+hK47I+ll24kMy9nFoX2v2i9RCS7","tlshash":"b9a2d17041f63e48eee761fa82971309ae542ec51be94654078b3dcf0c90685f2a67d7","first_seen":"2026-05-26T17:01:28.784562Z","last_seen":"2026-05-27T00:01:19.410634Z","times_seen":4,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":49,"dns":1,"connect":68,"send":0,"wait":68,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/img/A9pA8sm7PgbOG4vkPoygfqe_gCZ2_GTg7xThLf5o8mg/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/blairqueenn-avatar-2026-05-25t08-16-00-20260525111606.jpg","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.689Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/A9pA8sm7PgbOG4vkPoygfqe_gCZ2_GTg7xThLf5o8mg/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/blairqueenn-avatar-2026-05-25t08-16-00-20260525111606.jpg HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 26190\r\nConnection: keep-alive\r\nCDN-PullZone: 5401652\r\nCDN-RequestCountryCode: IS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nContent-Security-Policy: script-src 'none'\r\nX-Request-ID: JLkynNwkYJe3L9OO8IWcy\r\nContent-Disposition: inline; filename=\"blairqueenn-avatar-2026-05-25t08-16-00-20260525111606.webp\"\r\nCDN-ProxyVer: 1.53\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 200\r\nCDN-CachedAt: 05/25/2026 11:27:24\r\nCDN-EdgeStorageId: 1198\r\nCDN-RequestId: 80926be85ac0810ffa24daf546300fd0\r\nCDN-Cache: MISS\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nCache-Control: public, max-age=31536000, immutable, public, max-age=2592000, immutable\r\nX-Cache: HIT, HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a90c2333443bee0bd47c63e8c2243eb5","sha1":"6e0d31a6c1de862a826b741837a7d96f02d0e429","sha256":"f5929dbec72fe3bcb2ae02345b9359c2a71da2c04a22fafdc9bbb939f8930834","sha512":"b480278ff8c70fe6aab1ea5ea7b1910eaab81c64c2ffcea285f8894138c190e62d45a548517296d404c5828ee0619421fe018b50d8c344810ca004edeb9d7bde","ssdeep":"384:40K5y2ko0cqqMfN1BvRMIZ2Ge52h9o/CJtPnkJtylcRCaHR09BPE2pymOGxBQhC0:TW0cqF13aPS9PWyyIaHRmF0atwkA","tlshash":"64c2e18f4bff64199004bbbe4cec360c20a5a1ace0afdb7ec6211f150d59b4dad0559b","first_seen":"2026-05-26T17:01:28.801216Z","last_seen":"2026-05-27T00:01:19.411266Z","times_seen":4,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":48,"dns":1,"connect":67,"send":0,"wait":69,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/CxwJFy5A.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.746Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/CxwJFy5A.js HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\nETag: W/\"19b-uZF/p90Q8rn7T5yok2CPYuNp3Vc\"\r\nLast-Modified: Wed, 13 May 2026 18:13:57 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":411,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (410)","md5":"a15296954d27654a0647a05c2bfbcafe","sha1":"b9917fa7dd10f2b9fb4f9ca893608f62e369dd57","sha256":"51ce66d9085c94c987af0053081d34b75f1a6b97c8f147a67e1f6f4001414556","sha512":"f350071d33c7fea4e64c0b6c02352412b519980ec76b25fa106c1972fa5357308115a9505c4a127d24e94eee1c3ea6081414cb18d2ce5d7609f5bab8fbbc3dd5","ssdeep":"","tlshash":"5fe0ab6e3181a039a30909b10072a090236e338c317886c2f258489339be079877bc0c","first_seen":"2026-05-26T17:01:28.741418Z","last_seen":"2026-05-27T00:01:19.396901Z","times_seen":4,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":44,"dns":1,"connect":54,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/DVUf0sdK.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.747Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/DVUf0sdK.js HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 2940\r\nConnection: keep-alive\r\ncache-control: public, max-age=31536000, immutable\r\nVary: Accept-Encoding\r\nETag: \"b7c-cbVlp4+aOZzNgIRjWZWl8rMXlMA\"\r\nLast-Modified: Wed, 13 May 2026 18:13:57 GMT\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7771,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7770)","md5":"6cfa8a89b1cd0a3eb6ea49f5dfe8d41d","sha1":"b8dfcc4cac284fb49f2f8e568ca60adbfff7a826","sha256":"dbd9b14e23e23b56d837f2aed1c286c8cb7f4648bebafd1de871e378317bd199","sha512":"bc9c4018defc379d332f656d15116b28b67f2ff6fd95d3ac8328f0b31b125c53be046fa1173d73ae65b7d92d3fcbd32329706a8e01301da1f6f09f27a7db561f","ssdeep":"192:tQ5JSH0My/FuGkAoMmxCBLL7YUeXX+Ehx2j1eGIjAmY1g12v:tQ5JSUMyNuGkvCBLv9wXNjEeZjDWuC","tlshash":"3cf194a5b19563b102f13cf0a536c996e3a32a743ce8c0e2294dc8773552846b6e773e","first_seen":"2026-05-26T17:01:28.739433Z","last_seen":"2026-05-27T00:01:19.402307Z","times_seen":4,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":60,"dns":1,"connect":68,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/favicon.svg","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.082Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"114-DkkvX/qBzubb2RIRSd0Al6mBkHE\"\r\nLast-Modified: Wed, 13 May 2026 18:13:57 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":276,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50c496e838cb6f044cbbf2bfb8e3902a","sha1":"0e492f5ffa81cee6dbd9121149dd0097a9819071","sha256":"15504bf73d2b0589be504ec52fc75f63af985a42a2c795ae81cf48154e79bed4","sha512":"f3ca3ab4e0e8e448f3bdc7c2824391a8e143a7939361a059d6d41d1274916e3b1b1ba7fe89b98fcb9f9ba6b73ae520781420d11c516599b4126a752c6d42849f","ssdeep":"","tlshash":"4bd02b65809ce61ac10c4e161645346930daf6c96e554814fb501939988bd9369aa65c","first_seen":"2026-05-26T17:01:28.792847Z","last_seen":"2026-05-27T00:01:19.411944Z","times_seen":4,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/brunette-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.316Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /brunette-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457 HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Page not found\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: no-cache\r\nx-powered-by: Nuxt\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nX-XSS-Protection: 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Page not found","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7164,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7164), with no line terminators","md5":"08e585f8d3829d4855c3f5355a2cc64b","sha1":"ddd2022d48e3f353e272bfd9f415e42706c747b2","sha256":"977f1af1d88a6952a8a41abd0c8c2e51c3da81fe2a331947201669938eabdda3","sha512":"d777df739356ed8742647a3259067853d7bc5fa7b02175947b8adb81b567e82aed5436c38808c9d4b6dce09d6e7183b91d8c41fed115446870a2bafea24a151d","ssdeep":"96:gAmnzU6RNqqO9VRa9bN1T+ukBOpOunQxgxPgu5JK6sSIWoOt37ed:gXXq1zRa9r1Kgx1sOx7c","tlshash":"86e1a7987d8954259fb349aff0e9b70884d873d2df138cd661ca27449ec6a9f3842b06","first_seen":"2026-05-26T17:01:28.732718Z","last_seen":"2026-05-27T00:01:19.412581Z","times_seen":4,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":372,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/couple-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:49.319Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /couple-onlyfans/_payload.json?4e406dd6-57a1-404e-a585-8556b1ef7457 HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Page not found\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:49 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: no-cache\r\nx-powered-by: Nuxt\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nX-XSS-Protection: 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Page not found","fingerprints":[{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":7162,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7162), with no line terminators","md5":"1a4b5e458d8378719e24504d44f4cc6e","sha1":"a1d62cd4a0e331abc5a52bbdc42915df2d9ce730","sha256":"5cdde870bae66cd726f493773dc1ef74127468436a139405a2cd475a44652378","sha512":"fe3e644b42075b360bb0dac767b587fb133346be5d02a58e2e020dd8f547871f1797664394e4b321c9a4cf4bd3a87924f23511e27c976c42a4718c8c23b08f75","ssdeep":"96:gAmnzU6RNqqO9VRa9bN1T+ukBOpOunQxgxPgu5JK6sSIWoOt3ied:gXXq1zRa9r1Kgx1sOxic","tlshash":"afe196987d8854259fb349aff0e9b70884d873d3df038cd661ca27449ec6a9f3842b06","first_seen":"2026-05-26T17:01:28.804643Z","last_seen":"2026-05-27T00:01:19.413234Z","times_seen":4,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":372,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/img/D5XNeb8USKoRBXNi7zRG3FFOrF9ozxg_hW4nIVvS4q8/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/daisyharperx-onlyfinder-20260404160219.jpg","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.693Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/D5XNeb8USKoRBXNi7zRG3FFOrF9ozxg_hW4nIVvS4q8/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/daisyharperx-onlyfinder-20260404160219.jpg HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 37414\r\nConnection: keep-alive\r\nCDN-PullZone: 5401652\r\nCDN-RequestCountryCode: IS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nContent-Security-Policy: script-src 'none'\r\nX-Request-ID: V76AujtUWQoe-dHlNGoin\r\nContent-Disposition: inline; filename=\"daisyharperx-onlyfinder-20260404160219.webp\"\r\nCDN-ProxyVer: 1.53\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 200\r\nCDN-CachedAt: 05/20/2026 21:43:52\r\nCDN-EdgeStorageId: 1198\r\nCDN-RequestId: 137528a2e9db03c03d60b2f104c26ab3\r\nCDN-Cache: MISS\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nCache-Control: public, max-age=31536000, immutable, public, max-age=2592000, immutable\r\nX-Cache: MISS, HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37414,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64a26c0f2abd113ae668dd2659c0808b","sha1":"0cf1478edfeb07af3aec26f37184d3d3ac51be32","sha256":"10fdf61dbbe033d20ca2ba0d9c125b92a02418e3e1c85f330ec52c5d879e3233","sha512":"ebbe9c737f343eb8e37bf83dff16f0e216b2c764474240d84c5936be13a3d74ffa9b319ff8f4f5e56bb7d42c24e8f6c21f3cede5133fd451a91a81794e672447","ssdeep":"768:GNuqWfEWxHhCnVHmcYfdBKe04mewt9u+2QbZa:GNbWcWxBCVNmvKeVwt7a","tlshash":"edf2f12db01e01e5c2b9625cb156bb0d1db54b2c7fbd367b0337c248a882d2a849cf5e","first_seen":"2026-05-27T00:01:19.413933Z","last_seen":"2026-05-27T00:01:19.413933Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":138,"dns":0,"connect":0,"send":0,"wait":54,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/qtFL_p7H.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.740Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/qtFL_p7H.js HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 70754\r\nConnection: keep-alive\r\ncache-control: public, max-age=31536000, immutable\r\nVary: Accept-Encoding\r\nETag: \"11462-JQHNv1N89yf2IVJT+NZk40tXBCU\"\r\nLast-Modified: Wed, 13 May 2026 18:13:57 GMT\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":188539,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32914)","md5":"e5ad18e1b01dbbf4aa6a73d8430ef4f9","sha1":"d4bd109a35a1de276c0771def3ee71576c1cafe3","sha256":"4c2c7e62bafda342d4da0e5b6b7271c9f88bf029606be196f74097b6d14d6c64","sha512":"84532074929f7a8874bf0442523581bc3bb5fc80d6dd9c5e701f773977a44a053500d624326ff783de1a66648a7db60423f8bcab076b98c263ad44db22867a11","ssdeep":"3072:LoHYi8FnlvrqCsH90H9dHWi4mUvZaB07xX00C0eytx/FIKWV8fw:VPqKTHWi4nxX0aeytb/WV8Y","tlshash":"340438e43192b07203e60ae1507b1006f2792965384ed4d4f26cecef396795a91bbfbd","first_seen":"2026-05-26T17:01:28.771156Z","last_seen":"2026-05-27T00:01:19.395182Z","times_seen":4,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":67,"dns":0,"connect":68,"send":0,"wait":71,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/DLXuCdQ6.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.749Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/DLXuCdQ6.js HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/_nuxt/qtFL_p7H.js\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 10000\r\nConnection: keep-alive\r\ncache-control: public, max-age=31536000, immutable\r\nVary: Accept-Encoding\r\nETag: \"2710-UoCOORF5amBwDfOLSSHP/lp0mCs\"\r\nLast-Modified: Wed, 13 May 2026 18:13:57 GMT\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43202,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (43200)","md5":"a6956d99b1aa3a31fb9a8c2f396e33cf","sha1":"40219d8d4eeb9f5e008cc6d9c41950b3a2b02ca6","sha256":"d6fdc9d81b0ac1920a771425be286b8d9957fdba3aa12f8b987cdd8522acc291","sha512":"6d82c195eec231f1f02ce2af32367a564727ecac6ccd0684c1ab584bdc274ce7bbb4812012940885eb6daea0fb8e560ea1d0c4444fbfd12fde64aa621504d5df","ssdeep":"384:aZN+906p2y7Y8AXYPNFH8RTWw7nNZH3/j1VfZiQYNN8r0LQShHkQ63wYuyq2W8O2:QsYlVfZiQY40LQShHZ6+jzhrCOKFX","tlshash":"2613f32505260cfd2fdd6ee4b0e3171e84ec0ba64be817f78d9ded84a249bd4d88191e","first_seen":"2026-05-26T17:01:28.760521Z","last_seen":"2026-05-27T00:01:19.38347Z","times_seen":4,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/_nuxt/Gg5osamM.js","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.853Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nuxt/Gg5osamM.js HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/_nuxt/DLXuCdQ6.js\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 2611\r\nConnection: keep-alive\r\ncache-control: public, max-age=31536000, immutable\r\nVary: Accept-Encoding\r\nETag: \"a33-d7qN5XSgKMXaKik08QyNyE5QVDU\"\r\nLast-Modified: Wed, 13 May 2026 18:13:57 GMT\r\nContent-Encoding: gzip\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5531,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5530)","md5":"f11752885aebd5a3803820d9e2ba2b7b","sha1":"d11baba598ba07e4c053e63c489d30328cdcad69","sha256":"5183bfa518652711c0e1441afd5557ca6fd35601f0bc7a0d34ee5d17e4ae1490","sha512":"382a22e8634a584ab00f94447168bc78c010a379d751075484021038b98f5edd8b844bd01b0afe588254682af0e476f84817d3a8d3513725feada78f61482ad6","ssdeep":"96:AWTmkUY79tRBjEmapboJsPPTgGCh2fzITKiKtNaaVwOnBNXS51M0DfDKrfD2YuzZ:3bt7/RB4D1+YsTK/tAaVwOPi5WGlzWB+","tlshash":"e9b10a08b2a694fc63a759f0b6d6b579b13c2a59f2848045b7b454a23631cfc8333638","first_seen":"2026-05-26T17:01:28.75031Z","last_seen":"2026-05-27T00:01:19.385291Z","times_seen":4,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/img/EcVMV4duDZgxOsfGx5sx62oGRwZHsdN6HKWf8CL3m4A/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/skylarmaexo-ppc-20260522115203.webp","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.677Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/EcVMV4duDZgxOsfGx5sx62oGRwZHsdN6HKWf8CL3m4A/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/skylarmaexo-ppc-20260522115203.webp HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 34918\r\nConnection: keep-alive\r\nCDN-PullZone: 5401652\r\nCDN-RequestCountryCode: IS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nContent-Security-Policy: script-src 'none'\r\nX-Request-ID: tfrrnJvUXLhxTUwXTa2XU\r\nContent-Disposition: inline; filename=\"skylarmaexo-ppc-20260522115203.webp\"\r\nCDN-ProxyVer: 1.53\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 200\r\nCDN-CachedAt: 05/22/2026 08:52:54\r\nCDN-EdgeStorageId: 1198\r\nCDN-RequestId: b90748c4d0062086d8baeb2ef384a732\r\nCDN-Cache: MISS\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nCache-Control: public, max-age=31536000, immutable, public, max-age=2592000, immutable\r\nX-Cache: MISS, HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34918,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"531feec4fab2f57e57761ad6970aab89","sha1":"df019712b03df907f1bb8fc85a6ede74f32c0f8c","sha256":"ecd0ad5cfbabba86259f0938b06e1bbbfd52cde7c6dd653957a319956a3099db","sha512":"b9ded948bf5df0d0780541105ebd71aa2c3fb706333bfb38305df8501722199da778e5feadbc72c60994308a66c112ebd360bd2de988267de83824fb2b61bd6f","ssdeep":"768:xQhmzGQYNBUh5cGe31MMR6S0CloSKddFE3QkM2m6UMvemTbu:xvMqhY1MMRcQoSKbFSQkM2J7vPvu","tlshash":"33f2f2a737197e2787743022b08159765998ee0de963c7bcd47586f0c3feeaa185e043","first_seen":"2026-05-26T17:01:28.782651Z","last_seen":"2026-05-27T00:01:19.415797Z","times_seen":4,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/img/8DCBv4a14vdxc6s9OhJof4AZBy4CvKqo67ErhFR5Sa4/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/ayumiwaifu-onlyfinder-20260404160300.jpg","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.679Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/8DCBv4a14vdxc6s9OhJof4AZBy4CvKqo67ErhFR5Sa4/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/ayumiwaifu-onlyfinder-20260404160300.jpg HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 27096\r\nConnection: keep-alive\r\nCDN-PullZone: 5401652\r\nCDN-RequestCountryCode: IS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nContent-Security-Policy: script-src 'none'\r\nX-Request-ID: YnEJeDlV2H-AGpN-cInX9\r\nContent-Disposition: inline; filename=\"ayumiwaifu-onlyfinder-20260404160300.webp\"\r\nCDN-ProxyVer: 1.53\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 200\r\nCDN-CachedAt: 05/20/2026 21:44:40\r\nCDN-EdgeStorageId: 1198\r\nCDN-RequestId: 35112559b8a5792d42db79eb2bbd8320\r\nCDN-Cache: MISS\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nCache-Control: public, max-age=31536000, immutable, public, max-age=2592000, immutable\r\nX-Cache: HIT, HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27096,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"519e37953a03e5fcc652c92f56a6c680","sha1":"f895f7bad46da0a7bfd6a4f7e1483c5192225ee8","sha256":"61bcbec9dc2f74d724551887bd9d25bc462a011ef842c2b490664b6adf82eaa9","sha512":"ea91ce38833ebef05781a7efafe49293a63d7f852c13ea35e85192e3050e2c41260238c42da92f696f9280d19487f558a32aaec1ecbce3199e0c4af42c6af0ad","ssdeep":"768:iiIqgq1E9lWTiQo2JpgC5W1iOzc1mzD5Fi74N3x:i/qf5iQ3Jpa3N8cNB","tlshash":"efc2f1b5d555a620c0e3e1addb0d701a3e664ebd9723f0eeb8e14a7ac9150844feb213","first_seen":"2026-05-26T17:01:28.747256Z","last_seen":"2026-05-27T00:01:19.416555Z","times_seen":4,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/img/Nc6d-TZjNy2QS7Lc4YKCN7hAkO0vxm7VUT0XOFKAWKo/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/kaiagoth-onlyfinder-20260425034505.webp","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.682Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/Nc6d-TZjNy2QS7Lc4YKCN7hAkO0vxm7VUT0XOFKAWKo/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/kaiagoth-onlyfinder-20260425034505.webp HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 13570\r\nConnection: keep-alive\r\nCDN-PullZone: 5401652\r\nCDN-RequestCountryCode: IS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nContent-Security-Policy: script-src 'none'\r\nX-Request-ID: Cb_WL20YWSPISf6Vzgp5s\r\nContent-Disposition: inline; filename=\"kaiagoth-onlyfinder-20260425034505.webp\"\r\nCDN-ProxyVer: 1.51\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 200\r\nCDN-CachedAt: 05/05/2026 21:01:00\r\nCDN-EdgeStorageId: 1198\r\nCDN-RequestId: d25bdb6c88c5530c75d8a1d719afadb4\r\nCDN-Cache: MISS\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nCache-Control: public, max-age=31536000, immutable, public, max-age=2592000, immutable\r\nX-Cache: MISS, HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13570,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dbf7f99d3f4c857c45b4850287ea821f","sha1":"df3239c6ae4e32842c1b88c3cb12c57d835120dc","sha256":"73445a777076183ee564a53b31634e8f88280a65289ad16d1d80ace05c983086","sha512":"a2db66f5c0001a6651b225a968142c9e2f78dda6641272b51cd5a5bb34bccd5cff6bcb29f7de1a913440c3ce279128e6798a868063f6281c9e37c044ec177629","ssdeep":"384:I0gtIPjj2zfVWrahY2+gmH7JsQeVY127Xw6zAA/IS:pWIHcWrahtmSC2zP","tlshash":"0952c1b2632ad61449a5963837a3d7e32c4a50460156c20cb275e36f4bf913f986ddb2","first_seen":"2026-05-26T17:01:28.748719Z","last_seen":"2026-05-27T00:01:19.417238Z","times_seen":4,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":220,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cryptohomesteading.com/img/ppjpblTtmCsuvn32eey4iUzHYP4NSfetc6WUxku35y8/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/elizavos-onlyfinder-20260426000807.webp","fqdn":"cryptohomesteading.com","domain":"cryptohomesteading.com","tld":"com"},"ip":{"addr":"185.165.171.71","port":80,"asn":200651,"as":"FlokiNET ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://cryptohomesteading.com/","date":"2026-05-27T00:00:48.688Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/ppjpblTtmCsuvn32eey4iUzHYP4NSfetc6WUxku35y8/rs:fill:600:800/g:ce/q:80/format:webp/plain/http://minio:9000/data/of-images/elizavos-onlyfinder-20260426000807.webp HTTP/1.1\r\nHost: cryptohomesteading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cryptohomesteading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 27 May 2026 00:00:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 13026\r\nConnection: keep-alive\r\nCDN-PullZone: 5401652\r\nCDN-RequestCountryCode: IS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nAccess-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nContent-Security-Policy: script-src 'none'\r\nX-Request-ID: gjZzR05dFnSD3JNXEylxO\r\nContent-Disposition: inline; filename=\"elizavos-onlyfinder-20260426000807.webp\"\r\nCDN-ProxyVer: 1.51\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 200\r\nCDN-CachedAt: 05/05/2026 17:27:07\r\nCDN-EdgeStorageId: 1198\r\nCDN-RequestId: 4feb00081e9be02492730ed3cc67a175\r\nCDN-Cache: MISS\r\nCDN-Status: 200\r\nCDN-RequestTime: 0\r\nCache-Control: public, max-age=31536000, immutable, public, max-age=2592000, immutable\r\nX-Cache: MISS, HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13026,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4e9c9078c282f80d4e4c333396382192","sha1":"f7fe0e5d51dc8629604b4974dcd2c68cba954035","sha256":"3cf09579f0493ccaf24ad9642e2d7be11af25ea7d05aaf187f5d79ae069ee3e4","sha512":"3abf26d539ff26d3400a91d5ef4abfb85e545b993274508aaa060cb9984609998b2b10a8a6f6ff39d76cfabf2334e32106b3c65b12061f6128e23feb28424e82","ssdeep":"384:6k6iE9QiX3CG6mArCQh1wNrL0dagfgS9SzLR7k6kuIHO+vW:6203CGT5rLSpfuRquuOd","tlshash":"6542d0896f3202654e3395b85d3a51113b9eb8c7b31d1b96cc281e41ff4845ebe9866c","first_seen":"2026-05-26T17:01:28.759265Z","last_seen":"2026-05-27T00:01:19.417906Z","times_seen":4,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":49,"dns":0,"connect":67,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"cryptohomesteading.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}