{"report_id":"9e63473f-16fc-4351-9dc7-515b415c7027","version":6,"status":"done","tags":[],"date":"2026-02-14T15:19:36Z","url":{"schema":"http","addr":"ticket.blockeduserinfo.com/76561198819984096","fqdn":"ticket.blockeduserinfo.com","domain":"blockeduserinfo.com","tld":"com"},"ip":{"addr":"172.67.184.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ticket.blockeduserinfo.com/76561198819984096","fqdn":"ticket.blockeduserinfo.com","domain":"blockeduserinfo.com","tld":"com"},"title":"ᅠ","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T01:24:27.380512Z","times_seen":17770569,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ticket.blockeduserinfo.com/76561198819984096","fqdn":"ticket.blockeduserinfo.com","domain":"blockeduserinfo.com","tld":"com"},"ip":{"addr":"172.67.184.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T15:19:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ticket.blockeduserinfo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ticket.blockeduserinfo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ticket.blockeduserinfo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"ticket.blockeduserinfo.com","ip":{"addr":"104.21.56.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-06","domain_rank":0,"first_seen":"2026-02-14T15:19:36.505848Z","last_seen":"2026-02-14T15:19:36.505848Z","alert_count":15,"request_count":5,"received_data":721374,"sent_data":2712,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ticket.blockeduserinfo.com/76561198819984096","fqdn":"ticket.blockeduserinfo.com","domain":"blockeduserinfo.com","tld":"com"},"ip":{"addr":"104.21.56.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T15:19:13.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"blockeduserinfo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 17:17:15 GMT","end":"Thu, 07 May 2026 18:15:48 GMT"},"fingerprint":{"sha1":"32:22:AF:55:7C:D7:39:77:B7:25:2D:A7:06:2A:58:86:ED:1A:6D:56","sha256":"00:A0:A5:03:ED:A1:75:CD:61:89:F4:57:F1:5A:74:E5:05:AB:75:36:5D:04:1E:37:5D:D9:52:E7:D0:E9:16:9D"}}},"request":{"raw":"GET /76561198819984096 HTTP/1.1\r\nHost: ticket.blockeduserinfo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 15:19:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: PHPSESSID=s70pgn8mid1fvgpeqa711bo03b; path=/; HttpOnly; SameSite=Lax\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Cookie, Accept-Encoding, User-Agent\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob:; font-src 'self'; connect-src 'self' https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncache-control: no-cache, no-store, must-revalidate, private\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kJbAND4Eu%2FEkuHSOqOFyeMglM%2BYdsXhQdb8lve1oGYkaVBLI0JQlv%2BELr4yEz6RMgO38lR6DHTYznFPZZksiNMDb%2FLsfVoMQypTUdCwaqO6C%2B%2BXQTb1n%2Bvvu\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cdd8ae38d3fc0a2-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5743,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (432)","md5":"d64f1b2350a262c96ecd2033fa7ac01f","sha1":"42317f2ed434f41a6ab2f6a8f51a64db9fab34c1","sha256":"043fb0ba74caa0812b1a7287509a95c7b14653a1313fb4cb195c206c9743ab5e","sha512":"f0e4ab5560afd91ea7437e4c35aa1b079c48b042a6e9a8b7aad8cf0e6067fd336b1bcd06fedba74fbc0f1dec5fff6781fb0883eda33225fbd767e8ee268991c3","ssdeep":"96:mKnN3AHcHKCwHSbdH1im0/H99HJ8HdH7GZrEMFhrNRHdgIJE:G8cyJVi5/d9p89qZNhr3d/JE","tlshash":"37c18423daf04c270732021aafa771998e628547e4946c14b6ec508f1fd2f9ac17332b","first_seen":"2026-02-14T15:19:38.139622Z","last_seen":"2026-02-14T15:19:38.139622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":36,"dns":2,"connect":8,"send":0,"wait":118,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ticket.blockeduserinfo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ticket.blockeduserinfo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ticket.blockeduserinfo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ticket.blockeduserinfo.com/static/assets/core/script.js?sign=e9576952704710ee7e94a4da6fb8a0db\u0026t=1771082353","fqdn":"ticket.blockeduserinfo.com","domain":"blockeduserinfo.com","tld":"com"},"ip":{"addr":"104.21.56.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ticket.blockeduserinfo.com/76561198819984096","date":"2026-02-14T15:19:13.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"blockeduserinfo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 17:17:15 GMT","end":"Thu, 07 May 2026 18:15:48 GMT"},"fingerprint":{"sha1":"32:22:AF:55:7C:D7:39:77:B7:25:2D:A7:06:2A:58:86:ED:1A:6D:56","sha256":"00:A0:A5:03:ED:A1:75:CD:61:89:F4:57:F1:5A:74:E5:05:AB:75:36:5D:04:1E:37:5D:D9:52:E7:D0:E9:16:9D"}}},"request":{"raw":"GET /static/assets/core/script.js?sign=e9576952704710ee7e94a4da6fb8a0db\u0026t=1771082353 HTTP/1.1\r\nHost: ticket.blockeduserinfo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ticket.blockeduserinfo.com/76561198819984096\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=s70pgn8mid1fvgpeqa711bo03b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 15:19:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 287718\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nsurrogate-control: no-store\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob:; font-src 'self'; connect-src 'self' https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\netag: \"e85b10caf9709f68f8aef06cacecd728\"\r\nlast-modified: Sat, 14 Feb 2026 18:01:22 GMT\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, private\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zkMKCCY%2FFamaccBIbvy%2B0n1WRh2lC8fS1X421y9zhRMlqbb8BB6PB7RA9oXntT5UT7GFDJ9T3NFF7t5TTYhZ%2Fr%2BEioF22dppkNL%2FdjD%2FJDwDyAvwnLfZ4AFX\"}]}\r\ncf-ray: 9cdd8ae548d6c0a2-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":659130,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (34557)","md5":"9c791f3215385bd3c3a3a8d2153ec441","sha1":"11fff37f02b0fe085a534636ae401b422c44ea0a","sha256":"179959bc6ed3a7a3ed7843a4afe1b07339101e281c1a99ee1fff2d86fc0e4963","sha512":"479b6c7e5add9688b411f416ccb6ca6dfd1a4f3879dd1e236495de4812a4ac8025fbbc8a68115c9aa518c202b38426914e9f761bd5517511ae4c2d6de173007c","ssdeep":"12288:9e9EMbAXnxnSFzgBZ196uHa42teC7/3F5R+kQtDlQ0a:9e9VbgncFzEnHieC7vFz+kQtU","tlshash":"9ce43a9073d0b890126f6afc2b7f31daf6ad6ea830d4088bd1855d457b76600a5f2e37","first_seen":"2026-02-14T15:19:38.142623Z","last_seen":"2026-02-20T15:11:43.863914Z","times_seen":4,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ticket.blockeduserinfo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ticket.blockeduserinfo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ticket.blockeduserinfo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ticket.blockeduserinfo.com/build/media/cdn/styles.css?sign=1ea2fe194f44b24caed6adc0be7dc809\u0026t=1771082353","fqdn":"ticket.blockeduserinfo.com","domain":"blockeduserinfo.com","tld":"com"},"ip":{"addr":"104.21.56.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ticket.blockeduserinfo.com/76561198819984096","date":"2026-02-14T15:19:13.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"blockeduserinfo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 17:17:15 GMT","end":"Thu, 07 May 2026 18:15:48 GMT"},"fingerprint":{"sha1":"32:22:AF:55:7C:D7:39:77:B7:25:2D:A7:06:2A:58:86:ED:1A:6D:56","sha256":"00:A0:A5:03:ED:A1:75:CD:61:89:F4:57:F1:5A:74:E5:05:AB:75:36:5D:04:1E:37:5D:D9:52:E7:D0:E9:16:9D"}}},"request":{"raw":"GET /build/media/cdn/styles.css?sign=1ea2fe194f44b24caed6adc0be7dc809\u0026t=1771082353 HTTP/1.1\r\nHost: ticket.blockeduserinfo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ticket.blockeduserinfo.com/76561198819984096\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=s70pgn8mid1fvgpeqa711bo03b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 15:19:13 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-length: 3259\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nsurrogate-control: no-store\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob:; font-src 'self'; connect-src 'self' https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\netag: \"efcd6e97e6a8e2cf3daeb950ddbd62c0\"\r\nlast-modified: Sat, 14 Feb 2026 18:01:22 GMT\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, private\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eOUTaot7Hd5rQ5Hzsnh1ZrC%2FT%2BDgR4fYaKED0Vayx52yIUBP%2Fef8ckqSksburvV5qfxjlmiSTNQM4wNzbe1Eur2VtC596DnAi17jOK%2FXwr6iKT8ZxTtUXfeI\"}]}\r\ncf-ray: 9cdd8ae548c8c0a2-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12562,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (12561)","md5":"ff70512c9bda81cf703502061bd5ac2a","sha1":"05f27ac071899fbd8e19e1b126b3d75712bf201a","sha256":"66be29ae8b3a68cc4df81fb29f63968649a460639846b256fec3e2b30005aa89","sha512":"6af5696be3a4839eded9a4f1362be0420b08e14df9d2a7ba23c6bd2f68b242ac153f15adc4d351f54c28eb25f6b980df299c6c414c9f06543f79cfdcb3e424de","ssdeep":"384:OpgJklx/++7PYh3AmOkkOuIT7zddzTxOZgiLjp9CAX5RV7YUQCmH5ES6O4BRi:OpgJk77rpi","tlshash":"27425021356c613aa17bc6651be7f686d016ba234a13b129fec1622c5fdf0d73372d48","first_seen":"2026-02-14T15:19:38.146148Z","last_seen":"2026-03-18T23:23:04.05094Z","times_seen":8,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ticket.blockeduserinfo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ticket.blockeduserinfo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ticket.blockeduserinfo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ticket.blockeduserinfo.com/apple-touch-icon.png","fqdn":"ticket.blockeduserinfo.com","domain":"blockeduserinfo.com","tld":"com"},"ip":{"addr":"104.21.56.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ticket.blockeduserinfo.com/76561198819984096","date":"2026-02-14T15:19:14.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"blockeduserinfo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 17:17:15 GMT","end":"Thu, 07 May 2026 18:15:48 GMT"},"fingerprint":{"sha1":"32:22:AF:55:7C:D7:39:77:B7:25:2D:A7:06:2A:58:86:ED:1A:6D:56","sha256":"00:A0:A5:03:ED:A1:75:CD:61:89:F4:57:F1:5A:74:E5:05:AB:75:36:5D:04:1E:37:5D:D9:52:E7:D0:E9:16:9D"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: ticket.blockeduserinfo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ticket.blockeduserinfo.com/76561198819984096\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=s70pgn8mid1fvgpeqa711bo03b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 15:19:14 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 15:19:14 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xwn%2BquT0468yU5OCloupgup%2BfgP16EaXYErKYdkKEiKgghfshWp8qg3gmGOZqmROkx1lP6tKJHZtVboxMKPjwjudkkUJ%2F7rSqgppKQ4pdyx25Uxyk3JuXsUe\"}]}\r\ncf-ray: 9cdd8aeabbefc0a2-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA,","md5":"d87cc38425581ca11f67877d942a9bd6","sha1":"15ca9c796dc063ed2e506865614bfd511edaeed7","sha256":"e43a1824fdbd4e5998ccda3f3e0600497aa48bfa86c065e913a87c53ea4b755c","sha512":"74f020058494c59a1ff529b4a87e6dfcf24a7b102ebf3a38b9e2a24f90884ab3d2450379afe9353fc7d4c8f3dbaf6620436d108477d5f624be64e17aacc5e00d","ssdeep":"","tlshash":"52a022f323a82cbccc028033800c0330cb30e20003200f0e002c823e8c0223200c8b83","first_seen":"2026-02-14T15:19:38.149494Z","last_seen":"2026-04-25T16:11:06.450352Z","times_seen":30,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ticket.blockeduserinfo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ticket.blockeduserinfo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ticket.blockeduserinfo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ticket.blockeduserinfo.com/favicon.ico","fqdn":"ticket.blockeduserinfo.com","domain":"blockeduserinfo.com","tld":"com"},"ip":{"addr":"104.21.56.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ticket.blockeduserinfo.com/76561198819984096","date":"2026-02-14T15:19:14.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"blockeduserinfo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 17:17:15 GMT","end":"Thu, 07 May 2026 18:15:48 GMT"},"fingerprint":{"sha1":"32:22:AF:55:7C:D7:39:77:B7:25:2D:A7:06:2A:58:86:ED:1A:6D:56","sha256":"00:A0:A5:03:ED:A1:75:CD:61:89:F4:57:F1:5A:74:E5:05:AB:75:36:5D:04:1E:37:5D:D9:52:E7:D0:E9:16:9D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ticket.blockeduserinfo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ticket.blockeduserinfo.com/76561198819984096\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=s70pgn8mid1fvgpeqa711bo03b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 15:19:14 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Fri, 12 Jul 2024 06:21:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FYeogbn3yHTO7S77rvDYmJh7Ltl4Jy%2Bkw3Te9l9YCSpMGnSMRH4Nwz8j6y7gsujy48%2FTa1ZduIrP2FYAQwW3reL06VU9dWSgLStzW89ny%2FzNSmevT%2FBlPW2Y\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6690cb50-969a\"\r\ncontent-encoding: br\r\ncf-ray: 9cdd8aeabbf2c0a2-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38554,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"231913fdebabcbe65f4b0052372bde56","sha1":"553909d080e4f210b64dc73292f3a111d5a0781f","sha256":"9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad","sha512":"7b11b709968c5a52b9b60189fb534f5df56912417243820e9d1c00c97f4bd6d0835f2cdf574d0c36ecb32dbbf5fc397324df54f7fdf9e1b062b5dbda2c02e919","ssdeep":"768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh","tlshash":"70038de82e4917aee9e2cf324adb6716237b4f88c0bc169742b07f193175a51c6d78c1","first_seen":"2023-04-05T07:02:49Z","last_seen":"2026-08-07T21:03:34.668825Z","times_seen":6880,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ticket.blockeduserinfo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ticket.blockeduserinfo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ticket.blockeduserinfo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}