{"report_id":"9f5fbb0e-ec64-4e70-b01f-3383bb2d95d8","version":6,"status":"done","tags":["scam","fraud","crypto"],"date":"2026-04-13T01:40:27Z","url":{"schema":"https","addr":"dadxczx5.pages.dev","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dadxczx5.pages.dev/","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"title":"Mog Coin","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dadxczx5.pages.dev","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-18T01:40:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null},{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"summary":[{"fqdn":"dadxczx5.pages.dev","ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-04-13T01:40:30.295121Z","last_seen":"2026-04-13T01:40:30.295121Z","alert_count":60,"request_count":30,"received_data":11599875,"sent_data":13659,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:6.4.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WooCommerce:8.6.1","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Elementor:3.19.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"dadxczx5.pages.dev/assets/w-loader.js","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","size":41716,"data":"","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-07-22T10:17:07.499165Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/assets/w-modal.js","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","size":37639,"data":"","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-07-22T10:17:07.414629Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dadxczx5.pages.dev/cb2f6a8161d5fe7b43e4bdf9de4ae6676640e250.svg","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /cb2f6a8161d5fe7b43e4bdf9de4ae6676640e250.svg HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0mRZ%2FZ7QcSf1DyyOslmSNsbB0ux3wq3I8%2BB%2FuB2xTqshZqj8VPtdTGUbqR7UBqcFL6pryHZ7fGjORDeFry6ZcxzptcXfvJEET4FQwoKyikAMdY0%2Fer7aT17180NEGFHw%2BzRZpo8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c80a5add3533acb77e6c324ae309ef06\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a13c52783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":768,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eef232ffec267b7ab79cabc07145d307","sha1":"cb2f6a8161d5fe7b43e4bdf9de4ae6676640e250","sha256":"4063d53d59ae3970d28204e01b55e673a3bc7a1d28263d948194be2290ec4e0b","sha512":"0fff69e13eefd39088c29513575081fd12febed3d7868ff3daa4d55ca13e0474a81b8917ef704c6c2cd576c92a6e0925204dc89627843fa4e2a86880694210e7","ssdeep":"","tlshash":"3c01f171e1bca394b91403f963f4326a31267cec534e841871e53929e82a05d2b24c56","first_seen":"2025-01-27T10:01:48.377109Z","last_seen":"2026-06-09T15:09:59.990339Z","times_seen":43,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/logo.svg","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wi6XjGJ8oi%2Bt7l5s4sftSjDS%2FCGtl%2FA1BJ1Xq3vOFZ7Zdax13xxHVDlTN%2FNwHtTiY1%2FJ8H0Yir1d%2FSU%2FwXJKpMTRBbzj8TpblKXakWltLvsUfp3KsbEFaTf2l54jMLny9dMTRQI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68a439ce29d66ccd07b427ef901a6aba\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a17ca1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":549045,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b95e558705434d59110f6f2b12eed2d","sha1":"adaf6c75f4a520ee4d355dcf31ff78032e582118","sha256":"3aa733ae2a6ef6e8ec2de0980a041a0ab6a38bbd0abf7f18832b1776ff71a38d","sha512":"4a186149037df5d2cdc2b95b2c4b1418c0c045375f6616891ee2cf716827ebbbd48b8b6e14f9e471e879d697d0b9f28803b71a83dafa40a0a4736ea15db81db3","ssdeep":"12288:CYoSBREzezBEsk44K//+hVOxLfbXvRpFFeQksZErJY:C9S3DtOVOxrbXvRpFFe7wf","tlshash":"f5c423b05f253f0dc258f33d7caf796a9f084eda484ce5ba81eb1b5b554f11a8b16808","first_seen":"2025-01-27T10:01:48.38653Z","last_seen":"2026-06-09T15:09:59.994473Z","times_seen":32,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/acdef5603c2387b0e5bffd744b679a24a8bc1968.woff2","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /acdef5603c2387b0e5bffd744b679a24a8bc1968.woff2 HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://dadxczx5.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-length: 15860\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"327f51cb3be108945dba1bcce6ce309d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I9ViigVRWo99uZMFP418Pc6QOziLMNa6%2BLtGhCB%2B%2Fmr73GCqmSAXf0XKyyAn7s90OML6rTBvFNuRras7YtLPYYFKFEfdKwB3Bast%2F%2FxtiXffl3ZOAlzQY0KxM5Jn0zlJ3a6KdCU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a1fd17783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15860,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15860, version 1.0","md5":"e9f5aaf547f165386cd313b995dddd8e","sha1":"acdef5603c2387b0e5bffd744b679a24a8bc1968","sha256":"f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860","sha512":"2a71edb5490f286642a874d52a1969f54282bc43cb24e8d5a297e13b320321fb7b7af5524eac609cf5f95ee08d5e4ec5803e2a3c8d13c09f6cc38713c665d0ce","ssdeep":"384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N","tlshash":"1a62d0058ba5850bf5b907fb0e1ab7ee30664b523c8c42278348073970db47a6b2b1fd","first_seen":"2023-04-05T14:47:55Z","last_seen":"2026-07-24T03:53:01.979245Z","times_seen":92562,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/8a0f0abf3594f8ce646150265cf3d95ca0be5522.png","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:02.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /8a0f0abf3594f8ce646150265cf3d95ca0be5522.png HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 21017\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"362b1a17404145d4893880bbb9adb244\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ciHIqrbBSu5lJDGYC82baV0fVl7Q3O7JRD%2B3PFFmNUJuFiEDMw0fqCGQpi23CkVjsEi5CRZaDOblR6uTNHd0spmSrdXs3%2FneRSJt8MFMmjn%2BGsBoo5xIUnoupKRUrPK6Be8cEf4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6c2aa3cd4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21017,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"33c953ab283088572d4b79d909a9f573","sha1":"8a0f0abf3594f8ce646150265cf3d95ca0be5522","sha256":"5755e450be9044e28bbbcfe674bec7b2d8de36a21f4dd03f61dcb8e299af5148","sha512":"47f6caa4b025dfe6e6aba55713cb842a7d02f50db3a65ce0d4324c80bd1c56fdcd1a39e4ddedb01c081b629f42c10d054dca07ee77576dbc25fdd186a3c23280","ssdeep":"384:dC57QNeOW5JzQ9eG542K3RV4Q+O6wFv5BQjX9oQkudI8I/ZclXvwZy:s5sH2JFGopbvh8x16/Zcl4w","tlshash":"6b92d1e2c54cd63edea616bcfac510a8df7495ce3c9065365026f5bb21272ace03542b","first_seen":"2025-01-27T10:01:48.382887Z","last_seen":"2026-06-08T23:11:50.831696Z","times_seen":35,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-13T01:40:00.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GAVay2JPT2%2Bucs5oq6wpA4%2FLZfl5ihLnFNkAB82MsLf8FG%2FXBX%2F6cdMA6i2%2BS0UyaAgS%2FNITQeYjVtFJYe%2BgtOxPgoIpX67LAwAHdrog1bA%2B623rtoAzaanvkuq%2FGC%2FBfSBW4l4%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c29f6d5e56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:6.4.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WooCommerce:8.6.1","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Elementor:3.19.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":213874,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (488)","md5":"3dc4ea47e83f1b9a6b9f71f3ed283391","sha1":"2680d1947cb837a6e9c3644a26241a938fac0cd4","sha256":"e986572064c740db74252539d660b6d2c0fdbe789e55ac1aa65b1e353c062a2b","sha512":"34cfccee051723b37cfb0029af0959e70ec668ac9c517703e6af11cc1cafa72098e934c4e4d944e288d747541d3d12ef7295ba0f4ec0a250b0b59981107f9f36","ssdeep":"1536:AAhtbVHLXgpRQNIzo/KQewheq4zQZeCt/0i5i8pfvB:DAote18vB","tlshash":"342420563da32128351f606f52d7124d2260dacbc61dbed4f9ec1251efb9e907fe2288","first_seen":"2026-04-13T01:40:32.991579Z","last_seen":"2026-04-13T01:40:32.991579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":23,"dns":7,"connect":1,"send":0,"wait":156,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/assets/modules.js","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /assets/modules.js HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dadxczx5.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y5EsVHLXTvJNVYhh%2Fl7puHkzcgGIvNdrV5TW0S5vkvXRDG2j1exppSzKw8L1LUWRZ1adB%2Foivq5JL1M%2F4lBf2ktSjT6dYdZrKLAL6zKdOVFKcgJWoaermjVS8ztDUnaPpg9eKFI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0762e737762a73005849dcbc1907f860\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a13c39783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6101536,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"3b213a32f63e7967e9c2a5535806df09","sha1":"2198e24da34b883543f6b2bb3b3e315cfc5452b0","sha256":"1c56392da634c53a1450bcebb75428d63339a9bdc0e7e4602c0b674dbf27696f","sha512":"1a44f17a2865c14c3570dffb931bdcf07e5d8b7670fcb5154d1088d6fd10d4406acab0e00d666528882f9d91abc635f96b139f64a467c540b695c2c69a70f8a3","ssdeep":"12288:BMGk0Eqoh8EYL7qjs30amseucfju2ZAyppl:BZk0EJGEYL7v0F7Payppl","tlshash":"c9254a8473a1f076439725a4543f100af239b86c384d446cf768eceb7da9989963bf39","first_seen":"2025-07-27T10:34:55.50581Z","last_seen":"2026-07-16T06:14:34.078883Z","times_seen":160,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/7ea027646eb42aac9335d1f2386097fe91db676b.svg","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:01.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /7ea027646eb42aac9335d1f2386097fe91db676b.svg HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:01 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hKmtbjmm6CfEUT83irrOz2XWBmxZZtIHjUcM9iPzk%2FKFvdIJfeiZEnvH2LAKc4sLuWPGlogSI9RWsTHu6IY8%2BTZMnvjSdWFgwA1uMTmqeWo525zCUJjo6fD6fDl0IguNHthvCos%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cee366f9865a43acb36d118ce6ba8c1a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a35e3f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1402,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4505baf9df3322eda7a1320cd5577682","sha1":"7ea027646eb42aac9335d1f2386097fe91db676b","sha256":"45893d6c2acd1fac7d7d20b3825bfa9331444d486b143e6d3e8f64a298406e13","sha512":"0dbf83fd9e5cb311e7de059226bdf85e4e26ceb9cefaba24aeb58fe40b78df35ad40441486d8c0f6396559c94163603c20fee1f62fa223dee8f38bb6c89975f5","ssdeep":"","tlshash":"b12174b5c3d1f290e602dbe0d304b8603223347eae77c78cc69e2a31e71200ed85d848","first_seen":"2025-05-16T16:12:44.546963Z","last_seen":"2026-06-09T15:09:59.99659Z","times_seen":31,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/393311bde26b99a4ad935fa55bad1dce7994388b.woff2","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /393311bde26b99a4ad935fa55bad1dce7994388b.woff2 HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://dadxczx5.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-length: 46704\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d787ad4d26a446ff3072e96ad88f05eb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yS6wti7yt2e8vOOr6NXA5CiFNWeEnQpSaYF8pNTrFrZBhvQHxJwoUdurJDXSjLoLYmkR10RPFv3TUWcALCwVf589zyRlz3WA8n7OPrwPlmg8PEWKodHDN054XBQtfwqSePb7Wxs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a19cc3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46704, version 1.0","md5":"30a274cd01b6eeb0b082c918b0697f1e","sha1":"393311bde26b99a4ad935fa55bad1dce7994388b","sha256":"88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42","sha512":"c02c5894dfb5fbf47db7e9eda5e0843c02e667b32e6c6844262dd5ded92dd95cc72830a336450781167bd21fbfad35d8e74943c2817baac1e4ca34eaad317777","ssdeep":"768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r","tlshash":"1223f100917181a2eea73b3e82c96adb00ed51db6dc0e564a22f16f99d1f23f4385d5b","first_seen":"2023-09-15T13:47:10Z","last_seen":"2026-07-23T13:11:19.765987Z","times_seen":20206,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/36c0b8964807d7f309d8c4c1f67a3aaefc0bab82.svg","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:01.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /36c0b8964807d7f309d8c4c1f67a3aaefc0bab82.svg HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:01 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xQ84m5b%2FkmzdTffUClfj0BwyFVsjqlliFgwOcwkBp4VVc1Fgo%2B0kWvxw8m2keG5gKr%2BOAg5zEEc1MYYoYEyJvPExuDGDxXNuwsT5ljs0pgYZA%2FkcsytZOC%2BXG7yxC6smRFmQRoA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ac11a70ff32282aee50cc3f7b49db17c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a35e36783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":814,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c494c7de3a47ad495c2b1cc0b7c071f6","sha1":"36c0b8964807d7f309d8c4c1f67a3aaefc0bab82","sha256":"0852e456fea8c5d6654c53037c875996dd48c0dd0083339dd95f71da992235bb","sha512":"fd71260ddce187e9e20e3663d724581c46b321c7f675b385c08c91ef60689b9a93f4ff5f021cd68d9e494e71fd87260f3039694757ca16943803b2a31e756927","ssdeep":"","tlshash":"c4011e72a3fc6385e65813d412f933393e357da96b04c42c26c43729e9660aeb614c93","first_seen":"2025-04-08T04:08:24.77591Z","last_seen":"2026-06-09T15:10:00.012391Z","times_seen":42,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/main.js","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dadxczx5.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2BUhRpRDg1JKzJyI%2FXVHJnutvJAhPGRrr2pa2ZcgzNJXM%2FdPqsv6xVVmkPnb1B5GYQQGRax2JoLrj6q0eopTmceNtO5qbeMRE7EbRSzDklgUmWByV0p3iC%2BbtVehj%2B%2BklT91Xn8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d93cf80af6a9ef54f4242d973e654c3f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a13c46783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":908504,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ca25826112f5937ec6905f31f4f4c8f0","sha1":"d09ecb955d647d09d351322edf1a38097d901bcb","sha256":"cdd5e4fb5923a3a4f8cb89370b0176aef79f09bf38465a99853b087bc3453516","sha512":"4d5831d226ab4d7d3e2d8353cdb1f5ea9d14543891d522f74fe8fd650ceae2596b7aab8568b6527bc18aa0e06c7c6098561b499c3e54c8fd687041f78b2a0c97","ssdeep":"12288:h2BqwNaRD6Yw0xDHIQINNuYxYmIy18gxSkIqOsZdbwewsvUGTQOx/TNBofzagvKV:KDj+ZEyY","tlshash":"e31563dc1dd1e30392dc8713af0627e5d2b96c53bd94a90be3a83c9cb4a8906f572e45","first_seen":"2026-04-13T01:40:32.994883Z","last_seen":"2026-04-13T01:40:32.994883Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/393311bde26b99a4ad935fa55bad1dce7994388b.woff2","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /393311bde26b99a4ad935fa55bad1dce7994388b.woff2 HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://dadxczx5.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-length: 46704\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d787ad4d26a446ff3072e96ad88f05eb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yAWt0cPi%2BaNUXbEuSbK4C9mFguprAKU7SqFuO3ijcbZkeiK3tEKJumvvHz7pT11euHN1sQMLWJBvgQMChDOLkKsHUZ2cGzBrZl%2FdBf2DFo1PtMNTfjghw4pINI1QQDsrTp6cB4E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a19cbe783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46704, version 1.0","md5":"30a274cd01b6eeb0b082c918b0697f1e","sha1":"393311bde26b99a4ad935fa55bad1dce7994388b","sha256":"88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42","sha512":"c02c5894dfb5fbf47db7e9eda5e0843c02e667b32e6c6844262dd5ded92dd95cc72830a336450781167bd21fbfad35d8e74943c2817baac1e4ca34eaad317777","ssdeep":"768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r","tlshash":"1223f100917181a2eea73b3e82c96adb00ed51db6dc0e564a22f16f99d1f23f4385d5b","first_seen":"2023-09-15T13:47:10Z","last_seen":"2026-07-23T13:11:19.765987Z","times_seen":20206,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/393311bde26b99a4ad935fa55bad1dce7994388b.woff2","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /393311bde26b99a4ad935fa55bad1dce7994388b.woff2 HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://dadxczx5.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-length: 46704\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d787ad4d26a446ff3072e96ad88f05eb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FcNLfmreN9SxbVuVPj1jbuGbAfKcIvCpEdho0J8F8C79HwsxCFOT%2BuOtXTPhqyuQW1eXePn3cvYg98Pd9XGjYZo8x%2B%2BIW0Id7KqY%2FOMiZdsw%2BCnOEqXwtgTtUaKbbEU981ndHu8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a19cbf783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46704, version 1.0","md5":"30a274cd01b6eeb0b082c918b0697f1e","sha1":"393311bde26b99a4ad935fa55bad1dce7994388b","sha256":"88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42","sha512":"c02c5894dfb5fbf47db7e9eda5e0843c02e667b32e6c6844262dd5ded92dd95cc72830a336450781167bd21fbfad35d8e74943c2817baac1e4ca34eaad317777","ssdeep":"768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r","tlshash":"1223f100917181a2eea73b3e82c96adb00ed51db6dc0e564a22f16f99d1f23f4385d5b","first_seen":"2023-09-15T13:47:10Z","last_seen":"2026-07-23T13:11:19.765987Z","times_seen":20206,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52.woff2","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52.woff2 HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://dadxczx5.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-length: 15744\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"08f4387fb4e2a84a1846c49e30b7bcef\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o3cor6h6dMe%2FODqd0EYwvzPpj%2BU9EMy57uNmLbAvlWiaGmPCbnylLM3ZNXQ6UHJ0HcnOTV26DA5A8uRQoz9ECnj515SYiBXOpA4HPfJ2B%2Fned40fvmFkjNTv1zd6XsAZKRib7Ug%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a1cce9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15744, version 1.0","md5":"15d9f621c3bd1599f0169dcf0bd5e63e","sha1":"7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52","sha256":"f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615","sha512":"d35a47162fc160cd5f806c3bb7feb50ec96fdfc81753660ead22ef33f89be6b1bfd63d1135f6b479d35c2e9d30f2360ffc8819efca672270e230635bcb206c82","ssdeep":"384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/","tlshash":"8162e00158a163ade9b2327ed10b1b91c40660a27d2504e8c6e4fc95fe3d7ed5487b76","first_seen":"2023-04-05T08:15:27Z","last_seen":"2026-07-24T03:53:02.017608Z","times_seen":162191,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/393311bde26b99a4ad935fa55bad1dce7994388b.woff2","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /393311bde26b99a4ad935fa55bad1dce7994388b.woff2 HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://dadxczx5.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-length: 46704\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d787ad4d26a446ff3072e96ad88f05eb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B2PTpdziBOUcpFt51YzdRqp2AEA2iJpbo768nViMY6dg25WpXohzfyIyIvoNM9%2FYq8r8lE%2FFxC7DIoIKmHcFHkJZQvo8maxJLc8qcJ1Q4UlHUXGlBth%2FZGNwRkOVM98y2xVWXaA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a1ccea783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46704, version 1.0","md5":"30a274cd01b6eeb0b082c918b0697f1e","sha1":"393311bde26b99a4ad935fa55bad1dce7994388b","sha256":"88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42","sha512":"c02c5894dfb5fbf47db7e9eda5e0843c02e667b32e6c6844262dd5ded92dd95cc72830a336450781167bd21fbfad35d8e74943c2817baac1e4ca34eaad317777","ssdeep":"768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r","tlshash":"1223f100917181a2eea73b3e82c96adb00ed51db6dc0e564a22f16f99d1f23f4385d5b","first_seen":"2023-09-15T13:47:10Z","last_seen":"2026-07-23T13:11:19.765987Z","times_seen":20206,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/97acb13ac224a8fafdea43349e70855122dbe128.svg","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:01.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /97acb13ac224a8fafdea43349e70855122dbe128.svg HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:01 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bt2neGLH3bcMg9%2BCFNfKWosei225i3uQtnn1%2FF9CxvdKoLW%2F5ZDN9g0KD7CsKGngSbH1tJs%2B8L4htRiEcCg5D%2F9jkq81fNrZ19%2FDba2s6HZhRNNsxrvAIv4niwGTdFhWqTWokDM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"04f93fc5920cdff8fbf785572e9ff039\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a618ba783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21272,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"befe94764a5f0a9673ec1a6e5ea99d3d","sha1":"97acb13ac224a8fafdea43349e70855122dbe128","sha256":"c1821c480510ef59b54bf01b73bdecd5276709dbbc08bfb70261b8f3c79e3d07","sha512":"ce579f1c445dfca31ec8a2bcf9bd0322f5cb961f3346f8b0cd672ca468e9e039b6dffb3dc6cae99ab058a1065672c05f8141e629e612d14dc44e35fedfd111bc","ssdeep":"384:xItRTnX0RoLhnlOYP96vpTvVXTvbNGrEcmB6F+YLOL:maUOYP96vVvVXTvbUocJF+bL","tlshash":"48a2f34b8360c97fc18a8b5cd110886472bd12bebad4d3a4fa79cf4f5a296064d5efc1","first_seen":"2025-01-27T10:01:48.392446Z","last_seen":"2026-06-09T15:09:59.997128Z","times_seen":30,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/assets/module-s.js","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /assets/module-s.js HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dadxczx5.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2FVCGTuZre8LyXUv5v6Lszr60J4u0gvf6mqfz1dnK0nTTiEmhOGYqq3tTxVR33TbgC2kZjnPgtsT3EzMcPoJnZVNltn5gdUlJYuIRIvfUvMsoAKq8C%2BLe%2FApV%2FaSk6GsGPqsf4w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d645bfa741350024c43f53400ab2e736\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a13c44783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67571,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f969a2b171f3d6cc890f97bb40dd6f3c","sha1":"1b77956a109d870f751c57efa157c03dae92b50d","sha256":"8b0c1a6034a4cde759fc13877e3a62b90f29bbd1a2379d3b0b0f6a1908de0a53","sha512":"81fe275abb4205dc7b8d243df5e633424199153f1a9ad7c4c18a679e584dfaa78a07cae6efe7b398525c79ca930ef659834f7713ddd3ee4b50cd180f48d6f27c","ssdeep":"1536:o6kXsv3QzRzdb/tQRhA8M/AVl3z35+vk8mgLoWzDrVj+j:3v3QzRzdjtQR68M/a3itmg/zU","tlshash":"5c632ec267c2bc4212475b76372bb5e6f93e4ce9b488448af104bc94f0bd916fae1671","first_seen":"2025-05-16T16:12:44.562779Z","last_seen":"2026-06-18T10:34:12.449592Z","times_seen":44,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/37126c426eee2745eeb5439cdac5317fd9e94edc.png","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /37126c426eee2745eeb5439cdac5317fd9e94edc.png HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dadxczx5.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 2177\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"533af01a8e7566d7adc6462ed70a662d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fx7yYsSKMHnOHxRigDvF0d10Y4jhTvQKgYkkZw8bpR9bLw56jbuKOGTkr0ANPoO5l1IQM7dAq%2FGVamYe4HGY2PNRAO35jt3ZpjLwJTWYDOoCpBWF4eI3nkTxCOjT7%2B8GXzXe9WI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a15c83783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2177,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 27, 8-bit/color RGBA, non-interlaced","md5":"f02e9edee3ef9cd1c6f2cbd76a674743","sha1":"37126c426eee2745eeb5439cdac5317fd9e94edc","sha256":"a276235d2408dfde158541ceff1222e05a7ea64ac99175bfb219e86d8b6784d0","sha512":"48e74a5f0b36928e2901f8e89e5f99b071321f032f87c0c90bce719efe1d5f2b34a58fd002b1abd0b26bdc13bff031c1917d718c2a45055e4723ac140bc44a67","ssdeep":"","tlshash":"1e413c37c15a664eeb54e41ab538ba2859fa03fd2049ec387320c8b469ec70100ddc58","first_seen":"2025-01-27T10:01:48.385806Z","last_seen":"2026-06-09T15:10:00.010553Z","times_seen":35,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/8a0f0abf3594f8ce646150265cf3d95ca0be5522.png","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:02.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /8a0f0abf3594f8ce646150265cf3d95ca0be5522.png HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 21017\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"362b1a17404145d4893880bbb9adb244\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ktBjnyeLuMN2EORCrNzfOkh%2BJhyo%2FsbI6zPAdrJpiMJxz2FvMq0mNEldQ9NEJ%2B2aLaVIWo%2Fn4bXL%2BLjHYjub070OSEagww8L2I8yHfFQYfofVVV2SbjZWLRhIyaJPnXwdaqNldE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6c2aa3cd1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21017,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"33c953ab283088572d4b79d909a9f573","sha1":"8a0f0abf3594f8ce646150265cf3d95ca0be5522","sha256":"5755e450be9044e28bbbcfe674bec7b2d8de36a21f4dd03f61dcb8e299af5148","sha512":"47f6caa4b025dfe6e6aba55713cb842a7d02f50db3a65ce0d4324c80bd1c56fdcd1a39e4ddedb01c081b629f42c10d054dca07ee77576dbc25fdd186a3c23280","ssdeep":"384:dC57QNeOW5JzQ9eG542K3RV4Q+O6wFv5BQjX9oQkudI8I/ZclXvwZy:s5sH2JFGopbvh8x16/Zcl4w","tlshash":"6b92d1e2c54cd63edea616bcfac510a8df7495ce3c9065365026f5bb21272ace03542b","first_seen":"2025-01-27T10:01:48.382887Z","last_seen":"2026-06-08T23:11:50.831696Z","times_seen":35,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/assets/w-loader.js","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /assets/w-loader.js HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dadxczx5.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xYeuBieswd6pencN0HYtbEaatRNuulSDv%2BmSLZFkcEz2ETGmWOHg7qZvcmCUoEwgSHTAJbZ9wwNLNgTGRLRbAGFBfCIuREoEkhj%2Fi7T%2BD3zGwCzqzn2YdBvyF%2Fem6%2BxNtUnEEsg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fb7060baa8a7ee55493a0e5186e9d53c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a13c36783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41716,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2342), with CRLF line terminators","md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-07-22T10:17:07.499165Z","times_seen":393,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/assets/module-x.js","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /assets/module-x.js HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dadxczx5.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s8EeQORsjBTdPsmY8tdZV6b3A6k9KacZI7Iy99Eo85Iz%2FdEWHtPmVuLz7HhQNf2n2GOsfAgbs%2FBkqhqknKI4oJ%2BGog6NkONbfNmmbKNa5mMRfxFLJVJn0YTlM1XZ7XFpl6kL0xY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f0214e5c93acae169c0fe58f24aaae97\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a13c40783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65791,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fac5a8a4657b259fb0e5922ec478f7e8","sha1":"6efa4a1a01be907851b5babb95330bc289e78e76","sha256":"d55ed9fc4e049d8de59be60dc384983a46fc17f798589365d21a61aca909f961","sha512":"ac4283ce3266199acecf21ee0cb987cdad16cb1461d68d8b1e9f19eedcaa629d3db7ae70b67ba7248b9745c0c1e0437d1e1813bdea57522f213d2298648baba6","ssdeep":"1536:qplrE3cfTj/HPMcupsRoFzWsO4k7+ZwmOl/nYyeC2J6:qDrScfTjPMcu2RzsO4k7oJ6","tlshash":"9a532fc277d5bc4102876b76771ba1eae13a9cec70c9488bf014bc94f4ea912fae5570","first_seen":"2025-05-16T16:12:44.54493Z","last_seen":"2026-06-18T10:34:12.44773Z","times_seen":44,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/012f3219c9278f70700872486c32c4b951cd710b.svg","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /012f3219c9278f70700872486c32c4b951cd710b.svg HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:01 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UyjyFZGUfkIQN1AesFkqSvrPSAwX3STE9pN1WGRHROj%2BqYfYQYita1yg92kbM4N7Yp9sTPpZQ1N0qE9v6yhdH1p%2FaRoY6RGy1H7MdPiRkC5wsLCb%2BzDzKAC4wOKfKGZz6S6rJXI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0ff08c1e2c4416b85ea4b5cb73129a9f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a13c49783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1760068,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc1919db9836505cd92963a73c12cd58","sha1":"4d9accbe51e7d12b2b532723f7fb30d600b3e934","sha256":"4f4e0ed0f9beaadc75c6b51316f1dfe7b9e6ce3c2e9d84ec26037e4afc760b96","sha512":"5af6ada56a807cec23a4c19965f3625e552eb791da056076e62df79191766038cd28074980886379f9f993c8498f83be6aad19f6e525ec095abb61f27994acca","ssdeep":"24576:gdTDLYM65inE8bwSEoFX76gDjhuWSPm7SoEgj9T:0PLWLSZ6JFu91F","tlshash":"412512b3454bbcaf33118e5448262ed02da67c1bd6ecc0c4bb8d90d575fa9249a7e8f4","first_seen":"2025-08-04T04:29:57.822248Z","last_seen":"2026-06-09T15:09:59.999916Z","times_seen":36,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/adf17022464324c5a47a68f64e74a8439db5d313.svg","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /adf17022464324c5a47a68f64e74a8439db5d313.svg HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hv6923P%2FJfUCciU%2FL4J36MoGLMHtzpjcCUeEa8j1gfVWwYHFLBlMHzEeANg%2FE0AjQH4%2F0rB9CqhyLrkiE5LtMKnotd%2BUVKcnmGCIeiVLr4GRQFjCIkh8zG2cynOkeQAyAOZbXWQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"08a52896cc41ced02c05f3bc8c1acb4c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a13c4f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":549045,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a42eb8123363a5c34b2a764cc0642425","sha1":"adf17022464324c5a47a68f64e74a8439db5d313","sha256":"f36df0e0f463df06e7d388f4dfaeec85d051bcb857a8613e75832206ae946580","sha512":"361f6cbcccfade37e552da49611b706b4c735eabc0b6d13f731f76b7717317d6b96cfbc42f0d00978d750113dd2371869e52aa35c2f316c9e2b076001848c2ba","ssdeep":"12288:aYoSBREzezBEsk44K//+hVOxLfbXvRpFFeQksZErJN:a9S3DtOVOxrbXvRpFFe7wI","tlshash":"ebc423b05f253f0dc258f33d7caf796a9f084eda484ce5ba81ab1b5b554f11a8b16808","first_seen":"2025-01-27T10:01:48.361857Z","last_seen":"2026-06-09T15:09:59.99192Z","times_seen":41,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/7d0bdc8477d35fb501311c52b928c155b3a906a9.svg","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:01.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /7d0bdc8477d35fb501311c52b928c155b3a906a9.svg HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:01 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B2Ei9TkhR7DHHhnuXFKx%2BUpyONz340SGjGk69YZ%2FDmzc1bAdU7V%2FGYhZTaWFhYD0Bm5YXIEBSJ%2BET%2F6aBwEt0SmKTuu14oADJaSpysoYiRxM73gQo2QGxyujX6UP%2FrunDNuCrUU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"eeb38666ca3732f9d849d2ccd7baae2e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a35e3c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":822743,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d12b59248dd2e6f601773fd67afcff0","sha1":"7d0bdc8477d35fb501311c52b928c155b3a906a9","sha256":"16be5ce0da9b0f6a60bd7b5b8d4c4f23c37de344703ad630752054d9799c63a6","sha512":"88e1423ff8f39477070a279f5c5c639eeac95d321e8b4cfcb60fd037014b8baab16a2df97da156906f055cf5a3fdce164a2fab176438ab18a77cd9f739c3d1b0","ssdeep":"24576:OoDlCU1Bj1CO8dGtebUKFM2wTcoV+gBMEa:x5COj1Cst+ezB4","tlshash":"d6052372e8923c8f671c4f61a07a33486df46a67db1ed181bac820d4398f7a09577cb4","first_seen":"2025-01-27T10:01:48.383871Z","last_seen":"2026-06-09T15:09:59.989645Z","times_seen":39,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/assets/w-modal.js","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /assets/w-modal.js HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dadxczx5.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZDPrk6w6lhzsuVsw63Ho2JcZ70Igb%2B0M7kmdCqqw4ALbeoaqGcWmdbVepZeU6HXKNh8vQTbPKXKppoO%2FP6HkD8gYdKeuoTVAisAaZoby9G2FqG5U24asJOTfzWZlvi6oQlbfUg0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a24410c1d13ece1579788b1bbb3e054d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a13c34783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37639,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2304), with CRLF line terminators","md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-07-22T10:17:07.414629Z","times_seen":200,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/assets/module-b.js","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /assets/module-b.js HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dadxczx5.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MkprRTibSfO%2FRbfKqe5fs9owT1iwVZrQBSw7roY8hGSl3ZzFgNrqXXgwjgRlAVAgwElg%2BBywGsQJhPmzz4lq36wq7O5OOzzYzq%2Bm16P7QviSSm99q%2F8dOAZj2%2FOx8MjDDgi0Rqg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"de86aabb89c9b634fe49c0dae3338a06\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a13c3d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72593,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2b9ca76f81e99327fac32f10379100cf","sha1":"952295feb0552964b196d0b847bda8018689e5e3","sha256":"d093eded03a39b2cb27fe31ebce1c2d75132de9ba9ab80b1371b7522e17b0172","sha512":"e6df99bf45180220ae4c946b0f5e8fa47bec2b1c1610c5a114d7990b03442e3ee0f1a17d318ae9249206de4431cd63221ab085178f3e48fa25babcf4aa260ae3","ssdeep":"1536:hRc7zdtLHt3/ExHcMtDnjoNfe1hhJDvm8xanV7lj8fu83OMK4:hRc7LZacRNf8XJDvm8xadlj828+A","tlshash":"856351c177c1bc8112476776731bf2eaf53a4de87188488ef105b890f5b9a05fae5a38","first_seen":"2025-05-16T16:12:44.549356Z","last_seen":"2026-06-18T10:34:12.486082Z","times_seen":44,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/49ab62c8a5466f4f326aed3c3c0c1c20da0d3b0a.svg","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:01.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /49ab62c8a5466f4f326aed3c3c0c1c20da0d3b0a.svg HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:01 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hiqGgdyY0DlFKu%2BCsOTkv6SrohCwd6IkVUBB%2FJhbgjMb1CAuJ0Wi2JO1fkJ%2FwbDUwh26R%2F%2Foimfcem9NRzhqLKRRJ3j16kq2ONSjGGqD1elxfRIotDdUXoRLhhCRKlUJouoIzks%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b22d6c9003dd369bdcca60757c1df1e3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a35e3d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2520,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bfe45bac64628abdb672e56adb08ac2","sha1":"49ab62c8a5466f4f326aed3c3c0c1c20da0d3b0a","sha256":"75e324243926df8db2bf6f4bcb466287c34be8f091f4c3c5bdd92e419eaafbfa","sha512":"079778d22543edfb28527faace4ddbfb97c5cd4bf3b28a69b3a3b0d8675ff8c766bad8979c94b0651d05f8cc3ebc37c770470ad018f7c7284f445855c4f136cc","ssdeep":"","tlshash":"9d5192fba3f4f1d0e905d7f1ce1655a2b22724feaf91c50943d96f80e90906e8c08c04","first_seen":"2025-05-16T16:12:44.542615Z","last_seen":"2026-06-09T15:10:00.014003Z","times_seen":31,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/393311bde26b99a4ad935fa55bad1dce7994388b.woff2","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /393311bde26b99a4ad935fa55bad1dce7994388b.woff2 HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://dadxczx5.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-length: 46704\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d787ad4d26a446ff3072e96ad88f05eb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xLU%2BULg0KxY4ZuwYUik1kPaYpynRkZDwMchHmwWg2K7GNaNTlphRqPjnBA%2Bj8I4%2Bofb1QtmBvzuyn6dvEEpo1oFvzCmOos5dK3qydGqJotJxuknW8I6mZ1EHnPSU7qmaC2KSjFI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a18cb2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46704, version 1.0","md5":"30a274cd01b6eeb0b082c918b0697f1e","sha1":"393311bde26b99a4ad935fa55bad1dce7994388b","sha256":"88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42","sha512":"c02c5894dfb5fbf47db7e9eda5e0843c02e667b32e6c6844262dd5ded92dd95cc72830a336450781167bd21fbfad35d8e74943c2817baac1e4ca34eaad317777","ssdeep":"768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r","tlshash":"1223f100917181a2eea73b3e82c96adb00ed51db6dc0e564a22f16f99d1f23f4385d5b","first_seen":"2023-09-15T13:47:10Z","last_seen":"2026-07-23T13:11:19.765987Z","times_seen":20206,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/393311bde26b99a4ad935fa55bad1dce7994388b.woff2","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:00.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /393311bde26b99a4ad935fa55bad1dce7994388b.woff2 HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://dadxczx5.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:00 GMT\r\ncontent-length: 46704\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d787ad4d26a446ff3072e96ad88f05eb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1YEXc4fXEyFp9fknO6sNDtK2zKZLcJQ2WI6ZKJswKGy7yasA4VDzV8fOzM4FexOhtkfz11tTM205fdgPbsDClCFLremnR0NNZqy2zeAtwJ8%2FN1r%2B7%2BQ%2B4wYyuH0c6B5qAFrthXI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a1fd16783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46704, version 1.0","md5":"30a274cd01b6eeb0b082c918b0697f1e","sha1":"393311bde26b99a4ad935fa55bad1dce7994388b","sha256":"88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42","sha512":"c02c5894dfb5fbf47db7e9eda5e0843c02e667b32e6c6844262dd5ded92dd95cc72830a336450781167bd21fbfad35d8e74943c2817baac1e4ca34eaad317777","ssdeep":"768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r","tlshash":"1223f100917181a2eea73b3e82c96adb00ed51db6dc0e564a22f16f99d1f23f4385d5b","first_seen":"2023-09-15T13:47:10Z","last_seen":"2026-07-23T13:11:19.765987Z","times_seen":20206,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/28b98decad7061d30035f52203ea47597b3a7d8a.svg","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:01.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /28b98decad7061d30035f52203ea47597b3a7d8a.svg HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:01 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iHiCuDHrP4KvN5bkHmBM%2B4myO0KaD2qhj5%2BQwCsBZsDUhcpuVlw71ReOQyqL67zeHYfml2WUI09fZ%2BxUvSZegiP5DGNwsgGBTXpvg0R4v%2Fmz1HtOOxvXna2V0LSCil1zr6S7GRo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b56e996cd8195b40d166bc6535d8af83\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a35e39783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1719,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e733b90b9ec62e21fac5f80fbf751c8c","sha1":"28b98decad7061d30035f52203ea47597b3a7d8a","sha256":"b63827bb5b05bd66b9d6f9a8978ab97225a440cd7c58e9652395326a511fe155","sha512":"a8b10c54a3d66d5cdb9fdfc40588235af23d3c579dfc02bd3ecf8b2153753b95b66a42a36d1e4051bdc404d910694d998b6300efbeae6a775b048dd96fc2a4a4","ssdeep":"","tlshash":"883110e183f8d3e0b41ce3f486f4a5bd356755bb2512dd2e0acc6cd8d24b11e85a8c80","first_seen":"2025-04-08T04:08:24.777704Z","last_seen":"2026-06-09T15:10:00.001016Z","times_seen":42,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dadxczx5.pages.dev/6005e5dd272114b731ad358cb569ce45159be2b2.svg","fqdn":"dadxczx5.pages.dev","domain":"dadxczx5.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dadxczx5.pages.dev/","date":"2026-04-13T01:40:01.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadxczx5.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 00:20:00 GMT","end":"Sun, 24 May 2026 23:26:33 GMT"},"fingerprint":{"sha1":"3B:9E:8D:B0:58:19:0F:9E:94:5F:53:89:E9:53:BA:58:B8:11:20:01","sha256":"FC:12:C9:D8:F5:93:30:0E:27:5B:7B:01:CE:37:84:CB:35:40:59:CB:F9:67:5E:3F:9A:28:A1:3A:82:E1:95:03"}}},"request":{"raw":"GET /6005e5dd272114b731ad358cb569ce45159be2b2.svg HTTP/1.1\r\nHost: dadxczx5.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:40:01 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zumOkgdTGvtnlJaVz3OiUuy%2FCNpTb7L6VibSm0Z%2BPChnf4SfmP3YeUgGPde1JvxLQCG6LVG4hekUPKIrNxWUqKU8IoREYPT9wKXeK1Nb9vr0A%2FgPkOY%2F7ctiDbapQZvB7%2BP8MKg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"58cd87986d19c867148438d3d349b973\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6c2a35e3b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2323,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2da78d0a375e677028f2ab5cd32ed1d1","sha1":"6005e5dd272114b731ad358cb569ce45159be2b2","sha256":"5062be80210bb10c6a104e603777aa3704e252170379a7feaa8f5adc54e406b6","sha512":"58c6891ace9f6911a2091950c780e0cd22197a3636b4f10ea7dd0d3b9fb50eefc5d3c87bf3336abdc20a1178adeaba66065882f5da83f16fb4e74eddd9a87147","ssdeep":"","tlshash":"29419df183fd33e1e50163fc47a1b2b7786328ba75108b244ab5ed74ca2a41d9e8cd51","first_seen":"2025-04-08T04:08:24.78754Z","last_seen":"2026-06-09T15:10:00.013244Z","times_seen":42,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"dadxczx5.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}}]}