{"report_id":"a0c7e70d-b312-4367-966e-d2796544dc10","version":0,"status":"done","tags":[],"date":"2026-06-29T15:08:19Z","url":{"schema":"http","addr":"yourcreatork.com","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"yourcreatork.com/","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"title":"Creator","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"yourcreatork.com","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-03T15:08:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":1,"received_data":6147,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.staticfile.org","ip":{"addr":"45.125.35.167","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2013-03-29","domain_rank":851278,"first_seen":"2013-08-23T08:51:19Z","last_seen":"2026-06-29T08:37:52.279097Z","alert_count":2,"request_count":2,"received_data":178548,"sent_data":953,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"yourcreatork.com","ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-28","domain_rank":0,"first_seen":"2026-06-28T09:59:16.299415Z","last_seen":"2026-06-28T09:59:16.299415Z","alert_count":68,"request_count":68,"received_data":2554476,"sent_data":40631,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-28T22:47:06.167692Z","alert_count":0,"request_count":3,"received_data":331465,"sent_data":1682,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"yourcreatork.com/","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"4f94eb3bd23aa595f45a7ecd2e0628d0","sha1":"d3a76d5abebd7aa27366aeac65d699ae6adecbd8","sha256":"a9af6e5c77b8e62aadfcde908e8176f7fd2d12ef13da1f747e9eef3140f349ee","sha512":"d2831def8bb564a3fc9bfbe21ce492539b3286facaeebd5afae8d3b89caef281e2a3f00b6a7288717518e9f81ee2c30bbffd2c4b7107558a0c0c1995342179e4","ssdeep":"","tlshash":"66310080c8000c00808000b82c82003020202020c00080000800808022080028a0080a","size":1592,"data":"","first_seen":"2024-10-04T10:35:01.525674Z","last_seen":"2026-06-29T15:08:22.112772Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"322fe35951c00650c350d13ab442603a","sha1":"af8fb17680fe55cf98e5b7be2107c721471ae923","sha256":"db5bfa54543f362d549b3add0ea7d52193586ce291762743ba1c852389e55a30","sha512":"c37689478dc87dc2a2aa333af661dafb4944ef0ce6be3d24d7306d39225be2543fef6e0dbc71471bfca3bf25f2cebb793cc2666e7a2483ca89e6416881456cb5","ssdeep":"","tlshash":"36310080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1584,"data":"","first_seen":"2024-10-04T10:35:01.539368Z","last_seen":"2026-06-29T15:08:22.113338Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/js/layer/layer.js","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-06-30T03:43:12.196073Z","times_seen":13902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"27a4daf5433e6b32208668bf1bfa76df","sha1":"72d3378beff9b3f0a3e0ce6889aae86c8b20e6d5","sha256":"d9d144cdc6c4121ed56399a6e5d136306df98882301ec0a859c54fc4fefba60a","sha512":"c1b3a9dd1cddda2ae135b35a14ebcffad9374764e35ac0c03c0852e78dbeb5ff72ca11a27f377ff3479d17325b5d82028b284492ec58920310be52eb31603d5e","ssdeep":"","tlshash":"f4310080c020cc00808000382cc2000220300000c00288300c008080000c823c0a8808","size":1591,"data":"","first_seen":"2024-10-04T10:35:01.530821Z","last_seen":"2026-06-29T15:08:22.114056Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"fe2e83a2ffe5fb2d0c5da2b6d33128cd","sha1":"5dac02723d4396f98267d7869de1729c8ba17037","sha256":"3803669c2dd53914d5ea8e541799947231cc36de7644bcc436ef0cb07dc9ebb9","sha512":"7d202ad5dc8cf9a6fd401fc0d11f9693efb16334b71a88eca1350d78401d74ce8c3a65f2e4043bb870ab0dfa1c62c65b90c1e64e5d980d3cf950a51e66c316f9","ssdeep":"","tlshash":"993100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1586,"data":"","first_seen":"2024-10-04T10:35:01.508353Z","last_seen":"2026-06-29T15:08:22.114683Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"9f0c7d0d530cffbad23eb957447d7de0","sha1":"977407806f0197fad3ed6c6787182edcb3ba3421","sha256":"cb53b388e473f7e3ff0251afd09232d82d0f200f8b5a784c5a23dbdc4113deb9","sha512":"a1c88f40588bbed6ada7f8284e9c6e8b4cb1d1d6d9070543a7f1fd2f8787c4000a173e65e5238708e0b7ec935f300d01adc34e8b20a4821fc7bcc3d73bca380f","ssdeep":"","tlshash":"203100e0c08e0c22808080380cb0000220208000c8c08000080080800008002800080c","size":1600,"data":"","first_seen":"2024-10-04T10:35:01.543785Z","last_seen":"2026-06-29T15:08:22.115373Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cfc101c25ae35bd286f6a1ac72c3ab96","sha1":"bc480e7e22c4d6ee1883338431da628af96b7c1b","sha256":"e5a2a58a38bf8ee42d0e280a74b438e392acb7bbe1b45559bdf1326eccaebf3a","sha512":"85d253b67646a3d7eab8bf12ecd937057b8d505a6888dea373d3692947014578909772274899bb3600cb4c9cab0f8a8ed20c17ae51a3b4724cd8b0e3ad336d90","ssdeep":"384:ubYpA2XqL6znvF4nJpuE6uSDWAo4+NMHhmnyLfNFsPZIxupv3IMHB3YYaCsyVn+F:uH+Q+QvyLFFse6vbh3baCksFRdfnm","tlshash":"a5e23291e77c673612ab01af66ce41e2f73580a9227b862e3c6cc1182795d7c87763f4","size":31454,"data":"","first_seen":"2026-06-28T09:59:19.610242Z","last_seen":"2026-06-29T15:08:22.116109Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d662dcb00abd93a4913f85b96d1a3069","sha1":"0fe96174f00f73f9e7080d86f981e7735633a3e9","sha256":"149b86462b959f162781ce52f39edc9c6d20129c891c377cbf01d94d01aba8ae","sha512":"172b8c91cdfe9bb8a0469e70f6e34c2b6560f7d8f2b519bf9bca522bc9973ea65ac18d93a0734283dcdcddd223a0b594307336626d0432800d90d88796f5a9e3","ssdeep":"192:x+9wKCCBm9wKCC1u9wKCCXO9wKCC9u9wKCCssxI9wKCC7O9wKCCeQi9wKCCTo9we:x+vm7uVOrur+JOAQihoTuhK5Mh8N","tlshash":"6522b46cf993286c789334258f6f005438e87547cb49d4193eada8c26f8850da5bbfde","size":10272,"data":"","first_seen":"2026-06-09T08:24:23.856239Z","last_seen":"2026-06-29T15:08:22.116762Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"63d88699b2021e3bc834c282c07f0457","sha1":"b5d0f47bf16e89014db3b294aeb7ca8ce8c0d994","sha256":"ce67eac94427a771aa83be4c27fbf9f5552c7885038cf8ad19f4232e2fa40bbf","sha512":"4df4eb2577d70cbf1b1964e21bb678eab8a734105f52689fb93dd816e624b75aaefe448bfff0bca13eb022c60192b749ba64ca2858e31dc856f2f5cb42aa12ef","ssdeep":"","tlshash":"cc116b05a70b2cd828f3996f1f1384120c3524136887ca243f4d97e09fe9e939469d5d","size":1076,"data":"","first_seen":"2026-06-09T19:00:24.191423Z","last_seen":"2026-06-29T15:08:22.117449Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9e951ccadec7053c28ad5a64f31d481","sha1":"13328ffc309fc222bd1e5009d029c2b2e6d55819","sha256":"521b2f7c72caa8b0063909fa695494538293dc98ef65e03f282c3e482aaf86c4","sha512":"0eafd63d06bbd402c5ad10ea1e15765b143c5b42407a32908e33f5e194e52ca446afc2194d4b4df6d66fd1016c834c642e3eecad144015ce44b25464ab13ab55","ssdeep":"","tlshash":"a1f0c96e0a1ed7ff709802355326a2ee30cd4baa90076407fe87021716ac018bc01ea1","size":522,"data":"","first_seen":"2026-06-09T08:24:23.860945Z","last_seen":"2026-06-29T15:08:22.118339Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0493b16288b05cf354a6089113f6870d","sha1":"59040bea326e362335dffdf80038b194a14ae72f","sha256":"f94367639ba92ac2b18938900ec24d60af1a9c53b0d1bb7d75a5f9d10bf88dfc","sha512":"b13812b7c2d3acd24deb5a82984cfe482f2af29945cd6cf3efeaa9426b58e67f1b977e75e8ae9c01f7093bd01dbfc66ce7f717a3d89a341fd52cca6fad897088","ssdeep":"","tlshash":"9f3146c4df2d01acdc4853e82aad82cc0a3c3a703c339c696c185e389c68dbe9519d79","size":1715,"data":"","first_seen":"2026-06-09T19:00:23.03553Z","last_seen":"2026-06-29T15:08:22.119107Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d81b64898b39258242f30c41c9fb0a79","sha1":"cd64752861eacd6b0da0b6b6dbecfb6e814c6b5d","sha256":"41948649bd03e708df4542d16bc8381f46cda35b078baad4519006d97f9f5943","sha512":"5933893140273761f1c99276e19e444bf85f5c9529d61b27fbd817d08fb459296c4b274bcbad8f61e9d9029ce2c2d450d366d6bc6e564cfe08aaf89a59baffbf","ssdeep":"","tlshash":"09d05ec39b4d1058587b319784eb15cc005c426288920d89bc3d91908ca01ec5371f2d","size":249,"data":"","first_seen":"2026-06-09T08:24:23.86383Z","last_seen":"2026-06-29T15:08:22.119855Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","size":11264,"data":"","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-06-30T03:00:57.562199Z","times_seen":13997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","size":78748,"data":"","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-06-29T22:52:35.641272Z","times_seen":7846,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Static/bootstrap5Slide/scripts.js","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","size":298,"data":"","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-06-29T15:08:22.098885Z","times_seen":6147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"73e51165c8efd69ab612bda72b1ad94d","sha1":"4ca59794e1276e0de3c7db8bf2b675d3d38126ce","sha256":"07dd87ff4c869f0476290bbf769ba29e728557e5e6ab0effa2a2b7db8fe91c7c","sha512":"95320ccc613359051f5fe0e6b8fdf5942ae6a2c6d03bb6f7634f86f48c7529a19cf25421626971566531401ee4470106569c8537cd94a8214679a9efff91e1ef","ssdeep":"","tlshash":"cb310082c000082880a000380c82000020200000c00280200c0880e000280228002c08","size":1598,"data":"","first_seen":"2024-10-04T10:35:01.514597Z","last_seen":"2026-06-29T15:08:22.120465Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/1.10.2/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"45.125.35.167","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93100,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-30T01:44:03.531106Z","times_seen":21283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"446e58f1b8534af8909f42943517b225","sha1":"8c7c0550fa28e94e98cee085d5cad1396d9bd00a","sha256":"5bc2b3d937ec6a04032c2c5e5f00bc73a7bcd533b4225591c723fdaa4d75fddb","sha512":"e40512da2c985608744ba45d0f77f0f791e40f24a14ac4fb3f2af090d114abef21101cdb10d2914e6387286903a5e4b95b8503abee919e39df0e79e0932708ae","ssdeep":"","tlshash":"3c3100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":1588,"data":"","first_seen":"2024-10-04T10:35:01.506935Z","last_seen":"2026-06-29T15:08:22.121273Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/2.1.1/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"45.125.35.167","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84280,"data":"","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-06-29T19:37:01.288778Z","times_seen":10121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"201c83c9fe5d03352545f8767d69bf9d","sha1":"fe167932991171b83ca92c1f6e1c3810435d46cb","sha256":"66fda0d693c403753c9247241220f473081d16ca651cafafd4dead67708170b5","sha512":"3f34e79e3bd011c1b5e550b0a3584e6e1401b5d4efd15251b0a626d5f3ea4291b255c914d7e4bc4cd6117fa97200d54e215275245035bc86e65f66bf5b33fa06","ssdeep":"","tlshash":"163100c0c0003c00c0c000fc0cc00000f0300000c0c0c0300c03c0c0c00c003c03cc0c","size":1594,"data":"","first_seen":"2024-10-04T10:35:01.512998Z","last_seen":"2026-06-29T15:08:22.121978Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"error","filename":"https://yourcreatork.com/","line_number":1520,"column_number":29},{"level":"log","text":"error","filename":"https://yourcreatork.com/","line_number":1542,"column_number":29},{"level":"log","text":"error","filename":"https://yourcreatork.com/","line_number":1344,"column_number":29},{"level":"log","text":"error","filename":"https://yourcreatork.com/","line_number":1344,"column_number":29},{"level":"log","text":"error","filename":"https://yourcreatork.com/","line_number":1344,"column_number":29}]},"http":[{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_doge","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:14.442Z","timestamp":1782745694442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_doge HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:14 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tKAnooUuY3CwzDwGt0F8SM7VF%2FRXugfmUzLOkV6Ugd7g%2B%2BbVtgkRZJLgwf92AriVDZACVJzvxov2QNhYzJ1dKUZhFdvG51holz5MkU5UC0LgqvUwhif1nO89Z3dn%2FJVWFGug\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d86e4f5cb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209,"size_decoded":981,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6b44a1a8a8cea9593d52dfe354c79ecd","sha1":"5cc7e34c6352b3c0e917806d8b23a73db2c5fa1d","sha256":"49f0b791f3579a50c30b9af4a6214f1436eac44fe06cafe2a74462ca301e1ca1","sha512":"86aacc6a3fef7d6c227903ee029430d3a1ca3cf2ad30657398311bf870696bcfce262fbf0fac2ab60795b97145acc9a97401e3a7af56df8704afdccf6db2d9a9","ssdeep":"","tlshash":"0cd023d0be7a04250871fbe164d4132e744e4087c043910567fe4f3c145c30c3627919","first_seen":"2026-06-29T15:08:22.066387Z","last_seen":"2026-06-29T15:08:22.066387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/imgs/hot-2.svg","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.015Z","timestamp":1782745667015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Home/static/imgs/hot-2.svg HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6307269c-1ade\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vC3XTX5Ig3eGB%2BDWHHA9NC2nZQCz%2FFrCkmUWG7GG9hxukWH1gC3t5Npj%2Bvnb2J6icUdD2ODJ%2B1TO4qoRPupwRXGkvyrnGdZrqkp2kYpSAuTJcCuPC%2Bf88gImgqfMNcbFBUk2\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a135d7c2dc0cb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6878,"size_decoded":2537,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd9279cfb541640afabd1d33527f1df4","sha1":"6d828472cfaa863044b92e5c884ea8d658df4d36","sha256":"6466ed8936ba729058d7e2ae3bc93a7d8f3fb8ec385d7e3c29f21968cbd5aaef","sha512":"53a3ddf98f9ea97b18e73e5ca308a452a16142e672dcf3d1c86e61cc83e94729651eb41301bc902cc2510178e0c708fb5b66f3bf1e4ccde0fcf5f61aff77fcf5","ssdeep":"96:QRslJ3A7/H2wd9Qci3A7/H2wd9Qccra97a9tx+duKNBBbNwKDNlUs7vkSqD:QWS/Zd9z/Zd9ia97a9tKblLs","tlshash":"96e197f7e1b8b993d246c771ed52485528aa84fbeb810391c2e8ff9a6135cc04c4edd4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T18:41:47.725804Z","times_seen":5083,"resource_available":false,"data":null}},"time_used":1468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/js/layer/layer.js","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.369Z","timestamp":1782745680369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6307269c-4d83\"\r\nexpires: Tue, 30 Jun 2026 03:07:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 12\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rekuL673t%2BUF1CtlUQhEUWxhdKwVvSCBUUJnuHCK3E%2B%2BzZRV8Ygtk%2BAAEmrv%2FMmkxGewMlXEODzPeTjmyIWQ9%2B89GImjn15%2BcvPtdcCzzttpWP7pDW7yYNYSWGLB%2BKn1T%2B23\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d8165e96b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19843,"size_decoded":7778,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-06-30T03:43:12.196073Z","times_seen":13902,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_btc","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:10.440Z","timestamp":1782745690440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i6sEY1Rikbpa6gYtCO7ZikCZtt%2FqYedCU1Kz5Z0bhxnGV0HyJA2GH3Y9JJwrLJaZ6GRua%2BCSJ6ppuKhnS7jFzNRGe5R9wzUIX7eR%2Bng6Ygn9bSqSLjior4hc1XrlmEBzGKie\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d8554ad7b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":205,"size_decoded":977,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fb6a77548690119ad4c39ba8e12b8bd7","sha1":"010898cb03f78d9b3e807d11fe02c2e750f8781b","sha256":"1c71ed72f84f5f625857129afceda147bab6419fb6555dbbb6746cefa50bd149","sha512":"0d329585cd037739a0dbd5f1b9c2b63de21b4d981ebbc755880ca1ac77b41f00f9e39b7affd51c35dba2d0b8e662e348198025a96017abc8904a2558a1571022","ssdeep":"","tlshash":"e4d023c05f3d05260c31d3d1acdd170f5449544584c3c34a5afed7f80d2c51c321191e","first_seen":"2026-06-29T15:08:22.068858Z","last_seen":"2026-06-29T15:08:22.068858Z","times_seen":1,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_eth","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:15.444Z","timestamp":1782745695444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=91YCcg13UfG%2FTe30UQfALv4sBL7b4cHjKltSF%2BQ6n3zSRRSNiDAVElX%2F2b64RvspGJ44bllu3uzQBxu6SssQqu3D7NRDMhmJCajBSxYidZjeWlnCYjO5b6KLcduQKgPTKkb0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d8748908b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":204,"size_decoded":975,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fd2d41f87b8cb9bf16de6c35ef69cd8d","sha1":"a28154f31937646c2694fd58705828168bf65196","sha256":"44ba79822f413b5141f10d79160ec707f0fa0af0420e2d1e96019957770cdf8b","sha512":"23e466a1308e740101321594a5f760f22d08f9dd996098d074a4134448c0822c9c3e6460f0dc87585e9c3841b77de2cf1874cc152ed025e2fafb31253352cd65","ssdeep":"","tlshash":"fdd022e06f3801390c32e3c0a8d8330e994e0096c0c2824a6ffd8bb810e860c7362c22","first_seen":"2026-06-29T15:08:22.069774Z","last_seen":"2026-06-29T15:08:22.069774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.332Z","timestamp":1782745680332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 15:08:00 GMT\r\ncontent-type: font/woff\r\ncontent-length: 106812\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"1a13c-GxDOCA4lYqi36DlQRNPKg9wRKZk\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230120-FRA, cache-bma-essb1270030-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 6423804\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LlXlrnHQsgb7qDU61rfyq1Pi4ynnmxUeo51GT94JzwlsZq5PRHIows2NP3LXgrqhJ%2Ffh%2FtTBB7qJWWkpjEOz0zZDUIZR61J5e7AoUmrFTyGi0Q%2BAO1Oh6COcvCKKiJAhKY4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a135d8161d5d1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106812,"size_decoded":107936,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 106812, version 1.0","md5":"df7de9fe96a30f78c7f652f5b00ae016","sha1":"1b10ce080e2562a8b7e8395044d3ca83dc112999","sha256":"011ae1fe8e56c310d82ec3795cb8f86b9dea521dd0bc560a0ae0c2e87baedd4b","sha512":"d8cd580ed4119b0d31c9f3b7ea1b2002ccef31ba26cc6791114e5017e9ccffbfbf57b8611aafa52a8b3e76fc8f77b0d51d333dfcd5b293ddde61da3bbbbda47e","ssdeep":"1536:IEGBxy7wyLnYmvpdgacZtaiLBug50yslpdHfaKoGS3MUt7jCP/KgpL+HoEf7HhDt:0zy7pnYm/zcZta+UNoGS3gpL+Zwul","tlshash":"8fa302c0688d7e9ade37df31a226826373d3094a637c2d6f26997852c946e0f7637341","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T15:08:22.0709Z","times_seen":10458,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_iota","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.443Z","timestamp":1782745680443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_iota HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q0EgZ61jmqrCI1GE12lxfsUy8u5BJDbzVkA5OSvAj6UzaHRw1wyAJLvPZo7d1rNUKCSlZta8VKOZDC7F9QJcIcMl5kMJur4Lk8l1rq1Z84BVIQ8HrF3EIpHU5COBs4uabeJ0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d816cea6b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":203,"size_decoded":970,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3095f9c42e198bbf76f9a2b87780062c","sha1":"1a9728ef0eb0d1f0558fa28bc454f43dcd29c914","sha256":"736bfa86b3991981dbd9111623cb4ffe0fbbcfe88a71bf2dfb12eb8f582267b9","sha512":"c328c3a47720c182bb26867cdd71a7bdda4c60d3cf8b850c559cb9820bf9a24fe4914cd847e0c9bc81070bf061872f11a2f1bb6e25772cd210a17ca06ba53379","ssdeep":"","tlshash":"ebd023d03e7d001708719bd258d4332f50cf4445c48043097afdd5b820581083731921","first_seen":"2026-06-29T15:08:22.072408Z","last_seen":"2026-06-29T15:08:22.072408Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_btc","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:06.440Z","timestamp":1782745686440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F9cyW%2BnFCt3qJn%2F6OjKIRK%2Fdn6yH0NZiNlLB4dR3FjYNcDXOV5OXcXigZU4nvyHkMcK%2B6jRKMOo6iIlK%2FCQAQIxWrvXZHagQAVZv5wIvFKJq9wp7VhQlonQS%2B7dj%2Fs6jD6P1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d83c4e50b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":206,"size_decoded":986,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"67136044200473557da9d6294fcbe300","sha1":"3e2a9cb707911396dfa032abae68f7e133c01cb5","sha256":"019cfbb18c379c5f7fdcb0593370ccfb55df5124fe208d82300808acbbb0a11c","sha512":"1f37f5605410c583185a30d705ebdff17659c3ec615d6edfdf8255ef98a4c9807e9dcbb0b23943dff48b8e674160cc9fa641b57c0714c014a0ecd5190b8a0415","ssdeep":"","tlshash":"75d0a9a0af3905260c21d3e1a8e8120f148a0082c982838a2afecba80a38108721282a","first_seen":"2026-06-29T15:08:22.073454Z","last_seen":"2026-06-29T15:08:22.073454Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:46.985Z","timestamp":1782745666985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 15:08:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 8018\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"edbb-Du3MPQ7GnRobCfGvnAP4Uqb5QVI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220103-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 4105104\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LHCl%2BTVyFBxDK1AJKqtFxcB1Cio2CxdCFrr70sRD3sWoP%2B9AHJiKsa0XtIy349FNiP9q0zASs53TFY1mN07PehPtL%2Bkr7%2BQdYsWtDtmnR%2B1gQMhTHb5UZ1Bo%2BmBgLbjZZis%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a135d8159b531a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60859,"size_decoded":9149,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dbf1248779dc682a91ba529b5efe0ffc","sha1":"0eedcc3d0ec69d1a1b09f1af9c03f852a6f94152","sha256":"32cc4a47b370e278072a6440249872e681efa1d992600420c03a9631da885d70","sha512":"2e96320bb785273c91c136a4aba02268e2c9ebcc92998c24160331ec14f0f902132d21f4ac4cb130771dd20758bef407d589b1f8e3175796622edb162a517098","ssdeep":"384:vaqJVm8OAL1M+hQokEYm47U7yH2CYEjOnm4zH7fZ6aXoso1v/:Sqnm8OAL1Mzocm4KyH2CYEjOnm874soh","tlshash":"2c53cebad18f05f59341e4d92743674293a9ba7ce1817c7ad342399ee3c06188ad73ec","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-06-29T15:08:22.074313Z","times_seen":15083,"resource_available":false,"data":null}},"time_used":13274,"timings":{"blocked":-1,"dns":0,"connect":3,"send":0,"wait":8,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Upload/public/629c72e4af37b.png","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.020Z","timestamp":1782745667020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Upload/public/629c72e4af37b.png HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-68eea\"\r\nexpires: Wed, 29 Jul 2026 15:07:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f451GK0X5ciOGycH5kd6GP3RdzBmshMdbmmn2Q75f4ReYzp7P6Mkq%2FMWlm5bq24C0d2bZSBBUpVnwljdJ8eUl8eIZ1waI1eww0wBJ1mu1zxdpY9G2z%2BNYNqHjnFakOE0ZCdP\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a135d7c2ec12b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":429802,"size_decoded":430732,"mime_type":"image/png","magic":"PNG image data, 1140 x 465, 8-bit/color RGBA, non-interlaced","md5":"225ca6bb404d12e23b7b386fad845b9d","sha1":"5867c40e357d614354b83402482c4587ec910544","sha256":"670d66f9a6d3a2428280c04d570de82d99bd3c254888abafb92882cfae08ed44","sha512":"91cc1f7d6e940496ccd1d6285188e9b0c8150c39a24e724152ad53401be977259b6a8f66fc0d3e5cf17b19c31dad8370fb4d81d20f8b7b591da332aeff0790b8","ssdeep":"12288:JuQM20o9QXiA45lDD1mpVl09MrFrJVh+y5:t9lDJmnr5vhV","tlshash":"4d942395c5c6bc3391c6d10c9ab712b1b2239a7998af5bd506997e8c144cccac3fe24f","first_seen":"2023-05-21T16:18:43Z","last_seen":"2026-06-29T15:08:22.074939Z","times_seen":4458,"resource_available":false,"data":null}},"time_used":9725,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2572,"receive":7153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/xm/mbn.png","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.030Z","timestamp":1782745667030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /xm/mbn.png HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 06 Nov 2022 12:37:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6367aa78-4287\"\r\nexpires: Wed, 29 Jul 2026 15:07:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2QxubBDMdsKD95aq9xUP9uSncBz2W0knT9oh2y%2BT95DXKTdA1jN%2B0BaFoXz3Xxgj6sxPZVNJrLsiyjA5NEti%2BAbNyyfy4fyfd9hl2ptTUQLVxNiiuDSDvQkLuLrTs4htwjOY\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a135d7c2fc1fb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17031,"size_decoded":10144,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1181, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1181], progressive, precision 8, 200x200, components 3","md5":"0b20cefbeefbedd80e49d8a58d77cf46","sha1":"290ca4efba0fce95a331d716e4a56c93fe576949","sha256":"cfed7f3aa25627c440f85b40b142c87eee4e25eb898d1d3549e6c25b34d19e9b","sha512":"88133ce89aa9c0c334c4148e0f265a9b8a485e30e3c5d9aa677225954d2e4b76d292342101486053533bdaea79f84b61c9ac28ddca7bec2e257155b6bd015b49","ssdeep":"192:IH5o6A9mn+82b28y4lFqJH5o6A9mn+82U9kn91hc+1GMSCjr1LUilTgcQJ9eZ:O5OMjPic5OMxenBc+Idi9U8gcQJe","tlshash":"74722a353b0adea3e4e5453c1e54c645f332ae85956f636178cd28aabf32f920ce5306","first_seen":"2023-07-05T14:45:42Z","last_seen":"2026-06-29T15:08:22.075486Z","times_seen":1495,"resource_available":false,"data":null}},"time_used":1642,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1642,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/imgs/icon_etf.svg","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.034Z","timestamp":1782745667034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Home/static/imgs/icon_etf.svg HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6307269c-55f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uVm5b0DugvlPTYyr2tRB%2FvMCfYJHMUWpe8p6BnMAtAObW1cvoql1GNRkd%2FmIq6Bj%2BUMA6XowH%2Bkv82Sbd1PkLpu8yzcMZ5Co3CU%2BpXWkfJbPxVfJc0ArPCxSmCVzLS17KMHB\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a135d7c2fc24b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1375,"size_decoded":1182,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e432564e65f8779c665055d5bf9f563","sha1":"dc529670e33c8baace696f7ed4c3ef3bbe9cad90","sha256":"2df7417ef0acff023bffea1bf0c6366884770c1dab4d191f24ec29c84d2b7031","sha512":"cec79f984f55609c45347e0a6b9e885fec23baadfb00fca179eeed2b2902e5a8659649b6e4d7c0711a40bff90b8acfb7b8823a89beb53f9e836211ef89f17c3e","ssdeep":"","tlshash":"cf21e9fd204aaa29b35dc352ab2961f4184610fe1f35e4c1dbf855143c1cbfe495a1db","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T15:08:22.076925Z","times_seen":2585,"resource_available":false,"data":null}},"time_used":945,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":945,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:49.179Z","timestamp":1782745669179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 29 Jun 2026 15:07:49 GMT\r\ndate: Mon, 29 Jun 2026 15:07:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5463,"size_decoded":1291,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"721a040ea564a6f1097d3c9fc78e4478","sha1":"969b3a763c65bbea8dd653387efe6482fd53f614","sha256":"1eab5e802b5f0457aaad88e630b825da8ed3ba340a35a34b5f6901d9d84bdad1","sha512":"44cce6feb92211ced4be081e6a2c9c0c63b0fc22a7243396544d0d88b4736d6e6d62ee3cad5136dda1b21e3f4eac55d6b465a0b28922df3565bc5bef366db625","ssdeep":"96:BOEabTxOEa7FZOOOEaKOEaQJc+uaOEaENqOxMabTxOxMa7FZOOOxMaKOxMaQJc+m:OH+yptkUkH0yXLkeLHbywkkdH","tlshash":"5eb17891045bd400aa432cc667cf7f37ed4e62113464c57aebfd9898ecabd272264b1e","first_seen":"2025-09-17T11:57:27.939025Z","last_seen":"2026-06-29T21:47:36.407497Z","times_seen":1520,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":3,"connect":14,"send":0,"wait":35,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_ltc","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.442Z","timestamp":1782745680442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_ltc HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qTkRuYg%2B47zcR5ddCGBPzqfnafH4d9XkJdqhlWVpt763vtCdt%2BMH8dRu0%2FZusnS7%2F91euNd%2By93Lnw7uYrUgnz3UnaulNYHuXxVFw0ZGd8HSzZ4iWXvddV%2BiHY4UmHdDIEjR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d816cea5b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":198,"size_decoded":977,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"caae90f4a016c6b9c0a72660df16cfba","sha1":"559408bf7cc0750aa0265741b3ee88625c846e7e","sha256":"ff62257320ecee63a7d0b1bea4b3144c9c86dd3defc7681a39ab1373a3918601","sha512":"a01776d6b0662fe7d27cbeb5babc4f1dfc322ad9ec5b3f1a5232bf828b1d3ce0e0ab34318464d6b1a3fcd68485ee946d4bd97e63612829fe848fc4ffde71e15a","ssdeep":"","tlshash":"24d022c07fbc04210e32abd1ace91b0f644d4483c08093899ffe8ab8243c00c3212c26","first_seen":"2026-06-29T15:08:22.0784Z","last_seen":"2026-06-29T15:08:22.0784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_iota","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:13.438Z","timestamp":1782745693438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_iota HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vfwbfphvtHSoLEG7BF4XqqptsOAKmqKtowJ1M5zV2734YEVtzCx9KclRn2qFJDvUBvKAAZUhtRM7e0e8aPdNffqqLyTp9XCkht2hhy9hTz8%2Fm2C4Mb6uygi866GgsHmTbteh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d867fe45b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202,"size_decoded":971,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a58062343d3e770bfdfacdadab929d6b","sha1":"e185089e80469733116a0ffa11b7e0e1901ac2da","sha256":"50899daa5ee600136ce03a06942bd2b6e418807a7de7cf027d321e5319674c9a","sha512":"3a7b77c6325877e2bdb2a9f719f25cbce7faeb2bc2f8be35139c57155899c361124d2659f4ce03952f276f32658e348fbeb8804a0baa67edc709738321885e18","ssdeep":"","tlshash":"0bd0a7842e79405608b5ebd158d4165f60ce454684c0430a6afd9568105c1083621811","first_seen":"2026-06-29T15:08:22.079587Z","last_seen":"2026-06-29T15:08:22.079587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/1.10.2/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"45.125.35.167","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:46.997Z","timestamp":1782745666997,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"staticfile.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 07:14:58 GMT","end":"Sun, 20 Sep 2026 07:14:57 GMT"},"fingerprint":{"sha1":"EC:66:E1:7D:32:40:88:F5:61:99:91:23:97:B8:39:95:69:67:C3:43","sha256":"81:BA:20:D3:CB:CE:E7:47:44:10:81:9E:F4:92:65:C5:28:F7:17:4D:3A:09:32:03:AB:F2:EF:2E:E7:90:01:C8"}}},"request":{"raw":"GET /jquery/1.10.2/jquery.min.js HTTP/1.1\r\nHost: cdn.staticfile.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodifed-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Mon, 29 Jun 2026 15:07:47 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nx-cache: BYPASS\r\nx-cdntype: readnode-007\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93100,"size_decoded":37445,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-30T01:44:03.531106Z","times_seen":21283,"resource_available":true,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":17,"connect":170,"send":0,"wait":203,"receive":0,"ssl":324},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/xm/1613786496962262.png","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.021Z","timestamp":1782745667021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /xm/1613786496962262.png HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-a83\"\r\nexpires: Wed, 29 Jul 2026 15:07:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GTMR8KjgM2M40Ozas57vTrPW9YX2OZyb9tp04beRrcFnEbgYzlLL9eFj6hQiv5DlqGM%2FHP1wHKzH3gVmQ0DWiIz2YCxynqlbp6LR%2BFF%2B8FVD4rgay5MULT8QAej7Y2PUgbLa\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a135d7c2ec15b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2691,"size_decoded":3430,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-06-30T04:55:18.870157Z","times_seen":22073,"resource_available":false,"data":null}},"time_used":1280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/imgs/icon_margin.svg","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.032Z","timestamp":1782745667032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Home/static/imgs/icon_margin.svg HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6307269c-654\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xueuuEPYI6tWzcmq4H9u%2BwKvJ2GLedKWTdRi8rji%2BjNEPSotOlfkT9eIwBHkMfwZocnnKFklkt%2FKTMDMLLFnvkZs%2FnT6Jw7brYcdMamAc3Rrt9DfIKbftIzpC42c0AapevC8\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a135d7c2fc22b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1620,"size_decoded":1520,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"283d6ddfb29042011328571a509df448","sha1":"3e486c50cfe119efc43c68ffafa349670c9f919c","sha256":"e88581cf4375fb6f9e7d94b4f9df4a667677d0d96384227c9a9228b1329f3308","sha512":"78e85634891dbc1423281f54e43c362b9cf8c75c83a070c34b36676b72b7b71e7793b2224c6d820eb870a0f7d854b336334b8ba0bca9125854139aaf2a97bc91","ssdeep":"","tlshash":"4e3120883a7ac39ce500e7ad981bb5ac3e1e04e96684c5d9c3e22c1078d2a59dc98dd7","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T15:08:22.082987Z","times_seen":2569,"resource_available":false,"data":null}},"time_used":1155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/favicon.ico","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:54.258Z","timestamp":1782745674258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:54 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UmKGZ37XUomotZN71PN3PFtjJTQTfB6Ks%2Fhq0x94d8JnFpIzHP1KekX1LEvnpP9flnvg1yxCmsGNg%2Bfsx%2Ba6oezwZhG4AqMQiOxmWPPqOIAbvhTs4uBNEX6E2pmmHTzZukqg\"}]}\r\nlast-modified: Mon, 04 Jul 2022 17:20:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"62c3214a-103e\"\r\ncf-ray: a135d7f01e1db1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4158,"size_decoded":1917,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 31x32, 32 bits/pixel","md5":"cef1fdcf0f902d25694d5ea83a3d8e97","sha1":"beed6c02f9875f1471122900f5d063d6fe67f0c6","sha256":"aaefc2dae382655fd38fef068fd3d8983038829141a7aee69b2748c21f11e8cf","sha512":"ad93af34db118050fa24f20b46cbe47e67ae07a671e92fed02710c78d0322591d662a83558ed27029574ace77f9e62b3e8cc5bd3b16d53aae700cb6edb661a17","ssdeep":"48:OmFtBetFrtn0t4+tPtHtRbtStj/tKJZri8jQ2nZb7PPPPPg0qlw:OPHCNvr5Q29E0qlw","tlshash":"c381d04bcc961255ea97103ef41383e1ac385ba64b9e710c2f687a1a381e77ed60470f","first_seen":"2023-05-22T11:04:23Z","last_seen":"2026-06-29T15:08:22.083933Z","times_seen":2101,"resource_available":false,"data":null}},"time_used":1452,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/js/layer/skin/layer.css","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.345Z","timestamp":1782745680345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Home/static/js/layer/skin/layer.css HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6307269c-36e0\"\r\nexpires: Tue, 30 Jun 2026 03:08:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VEe7TVhAmoRr7gmktiodxRJczresLpBuSVBnSUBlGJ8HLGFwtETCJKQKVwZ%2BgPujSJWCjehsxAlqq2%2FBEFA054gpkUKE4fvUjLxtHvw8WMH%2Fqy8UDH7IQGOSOpME0kvb%2BQul\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a135d8162e8db1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14048,"size_decoded":3664,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13967), with CRLF line terminators","md5":"1673a003559ea1607dd77e6467a4baed","sha1":"954f4afa17e3d1c057101e62950f6c9506245550","sha256":"9748f440829e0b76d70f344e9c989f6d2302eba81aeea03211d40ef5f29fe62a","sha512":"5f9b8254fe18cdc329ca87a4852b7cb5520dcf3c406c5b3d755e99d0e7ddd618cd5ca2b455868ae14d896431cea2252b60d79d5fdd9e404a1fb8685a05ceb955","ssdeep":"192:9OcW0PmLeWVNrzztBm0T9zBKgwBnsY5Cb+RX:9PW0ijV1JbTyGY5CGX","tlshash":"1c5202e144811299b0278611d6dcbeba32f88d53e5630dbef2573c1f874c6dba2b6247","first_seen":"2025-04-07T11:37:37.344268Z","last_seen":"2026-06-29T15:08:22.084535Z","times_seen":3245,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Static/bootstrap5Slide/style.css","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:46.990Z","timestamp":1782745666990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/style.css HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:48 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TwCKartnWakHKIKQzvrA5P6X2OXvzrXvMPAMRowJdLGYMve6B99q7t%2FihG0ugxk4VMxmAhs6ty5KAGUo%2F1ZyXbpWLFp9kO5Qi62MHTtlX1DxUM1W31SZoa5kxn8ypkNiy2Rn\"}]}\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 30 Jun 2026 03:07:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6307269c-24d\"\r\ncf-ray: a135d7c2bbf3b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":589,"size_decoded":939,"mime_type":"text/css","magic":"ASCII text, with very long lines (589), with no line terminators","md5":"df62cb99d119a66bcd5f06547d96ecb7","sha1":"a6d0e097db0919f47977c33510359bc08ec88a9c","sha256":"afca52e1c0203f27bf8165e8fcf92b2674f084f6372f12cc1e7bb3edaee35f03","sha512":"59d599c3a25a64cfae94e1b2f1328abffb199a503c0e8904a3e4a574c101cb6b72d09e94a7b2afaa3f8cbd1a55b92cb2b2bdc33b528ee6c953d30fa3b622cf0f","ssdeep":"","tlshash":"a2f07f42b71a596e5d872300a9d213abf10c7f319709097992f3211d8f29a85237df4e","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-06-29T15:08:22.085196Z","times_seen":6135,"resource_available":false,"data":null}},"time_used":1695,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1695,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/2.1.1/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"45.125.35.167","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.002Z","timestamp":1782745667002,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"staticfile.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 07:14:58 GMT","end":"Sun, 20 Sep 2026 07:14:57 GMT"},"fingerprint":{"sha1":"EC:66:E1:7D:32:40:88:F5:61:99:91:23:97:B8:39:95:69:67:C3:43","sha256":"81:BA:20:D3:CB:CE:E7:47:44:10:81:9E:F4:92:65:C5:28:F7:17:4D:3A:09:32:03:AB:F2:EF:2E:E7:90:01:C8"}}},"request":{"raw":"GET /jquery/2.1.1/jquery.min.js HTTP/1.1\r\nHost: cdn.staticfile.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodifed-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Mon, 29 Jun 2026 15:07:47 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nx-cache: BYPASS\r\nx-cdntype: readnode-007\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84280,"size_decoded":33779,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32061)","md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-06-29T19:37:01.288778Z","times_seen":10121,"resource_available":true,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":13,"connect":156,"send":0,"wait":170,"receive":0,"ssl":324},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/xm/5f8738fd439bc57.png","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.024Z","timestamp":1782745667024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /xm/5f8738fd439bc57.png HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-9a9\"\r\nexpires: Wed, 29 Jul 2026 15:07:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=61MzTt%2B3Lz%2FF%2BHxRFnMkaADVxQS9%2BSbXN44l45lQ0txHiqL6nBNufFaOK%2FxVJ6d4kMPlJpBpWqWNN3OZ1XqZCbTVJPdz%2Fy5x6tuPHJBFz%2FiMPk75k6g7ADhdNwdNiy%2FoSnwA\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a135d7c2ec18b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2473,"size_decoded":3117,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"430e14fa7ab62df82c9858bfa2682ece","sha1":"aa845a9abbffcbceee99934123b8e4e94b9ee52d","sha256":"20aa97f93b13e2de6de053d1d96a51ef8746a758973515f93b3f6e905c98f716","sha512":"bebb827e0a4525c0f7d3213a28fbde13be283e82d41ff86cfb216c98cdd5fa6515cd3403e2b0b2237635f46b0703c22359e797ca5bb0d3f660c4a1a287d600f5","ssdeep":"","tlshash":"f5511bd8fcdd3065d094b87b6b2121a25a831bc4f2807ae6f426c4495233c69076cfed","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-06-29T15:08:22.086412Z","times_seen":4998,"resource_available":false,"data":null}},"time_used":1074,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1074,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_jst","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.450Z","timestamp":1782745680450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_jst HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0RB7ZX%2ByaV3PPxnvYgCENAKOk8CaHySHykQjSqf52W3vCmE4NgDzGu6j6QB1lfl73bxx6V95K1hqGt%2BN878%2BPrcTzB4LBjYCtXQwwMxXPjel6zxSJRTdXLPxDe8Jnt6zPvsK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d816deaab1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207,"size_decoded":975,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"801bdb4e8b82495651bebdff77d96b56","sha1":"d89463bb90df26943f48d015379f8f02a1ed0a8e","sha256":"e7b38d31440498627b709254e7a3f6c1196a9dfb11016711574c141a7809816e","sha512":"2b0248ae5c1be906e2dd862d90074def900ac07df3c31c1b76699111b045fa777c81e903cc610b3de68028200e50ba7d3ccfc5db6f560f15b3c540a4e82a1e7d","ssdeep":"","tlshash":"e9d022c07e3c01220c62f7c268da036ea88d4482c086e2099ffecb7c092d01a3222c1e","first_seen":"2026-06-29T15:08:22.087008Z","last_seen":"2026-06-29T15:08:22.087008Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/xm/1613786513998262.png","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.023Z","timestamp":1782745667023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /xm/1613786513998262.png HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-adc\"\r\nexpires: Wed, 29 Jul 2026 15:07:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AF77xG3xS2D4DgWR3uN192g5Z5k6RqU8%2FhHhBlf%2FtFuP7EN3%2F4rZtun4zPO%2BF667S335obPJ0ko71JH7L44iQDh2SSQCCwWWNB4D%2F2mMpJ0WpoCYSacCUfcB4C8wAFrrPGh5\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a135d7c2ec16b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2780,"size_decoded":3554,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-06-29T23:57:11.573023Z","times_seen":21621,"resource_available":false,"data":null}},"time_used":1137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_fil","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.445Z","timestamp":1782745680445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_fil HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iHiyOhDdwhL5HOOtdEgUeLAtYPEJz0ZDIco0tvT%2FPmuVxnW%2BnSkJ6qsW6%2FL6xOTro0aucGsQZGKtqI%2BLbH1ZW06x5ZJ08%2FfkbgBR7sKmYFOeCazDB1lVzsx4foDk%2B8IcdDTp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d816cea7b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201,"size_decoded":979,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"96eb15186920b65ea56c9564cf1f62fa","sha1":"035fc70c3b375f4f99276b91afad7b38c6a40e3f","sha256":"6d4019b31d9615b6b086b6a4cf3cae1fe239f9a2c349a98f4a52d322fa4060c0","sha512":"6d8c657d16adc58d22e3723bcf87ed544c76bdc8366fc6e1dcce352262d54c5b6271b6befad0dd24bfadfff800f6383e5611b7711f886cb69ecb4aee49686cd7","ssdeep":"","tlshash":"08d022803f38012908b1e7e198ea1b6f64cf018a84c1a70adafe8a78106c10c322a81a","first_seen":"2026-06-29T15:08:22.088838Z","last_seen":"2026-06-29T15:08:22.088838Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1098,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1098,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_ht","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.456Z","timestamp":1782745680456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_ht HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 7\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CapSJqCsk1BJVzqqGq3DHbyvFrKqD05lJ8hG3hFaXJGqm6kFTXYR6NvjoqOaVX4UWlS872uo5A6HD3aeYGCqKYIUsRuZUev7280UOvjeD4sndAFzCkxyuBJyVp92n1tVfSyy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d816deacb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":839,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T15:08:22.089813Z","times_seen":330,"resource_available":false,"data":null}},"time_used":1421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_eth","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:06.436Z","timestamp":1782745686436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lkL7i6CuvuvPNPTKizHT5HF7zddOvDsDMC584pCUB4013gb%2BXR2wcAeTtUtPsYptUzO4gVPTaISXS%2FPikxBCL%2FB7%2FLZS2gudTI5IFm0dGIniEQhAWpN%2Bg76dInq2gi%2BRUnAX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d83c3e4eb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204,"size_decoded":982,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"329c5b3875ad23da4154d5ef2ff12fab","sha1":"7715ab3f09077a894e281d3c4b8ce5a6f426db3e","sha256":"07eadc04dfb5b0112f060ad1d20c8d5ce9e280343c471aea3dbef21151b5328c","sha512":"d4bcb173ee567ca9e7b9f5da6ee888c65c29c1da7598d44269a409d69711c3cd0d4dbdafaf40e8c5df2031d99f6ad58ab9872c0950c2c9e40a6f5ed3775665d6","ssdeep":"","tlshash":"03d022a06f38023a0c32e3c2b8dc230ea94e0082c08182482bfd8b7810fda0c7623c36","first_seen":"2026-06-29T15:08:22.09041Z","last_seen":"2026-06-29T15:08:22.09041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Upload/public/629c72dbe18e2.jpeg","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.019Z","timestamp":1782745667019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Upload/public/629c72dbe18e2.jpeg HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:50 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-219f6\"\r\nexpires: Wed, 29 Jul 2026 15:07:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=INalPHfBWcEHZvU4AA3LF%2Fsf0J77SXo%2BcFZh5S9e43oAFrVH7flCxQW4y9NbJg%2BuS1T9imvb0ZBrcR16H494edN%2BSWBiFQ%2B7v7AneLjK6TMPGZ%2FLi%2B0oMjzHQmPYYyJexSEs\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a135d7c2ec11b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137718,"size_decoded":134313,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T04:32:18.141912Z","times_seen":16845566,"resource_available":true,"data":null}},"time_used":8695,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3554,"receive":5141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/xm/5f87397132a8b02.png","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.029Z","timestamp":1782745667029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /xm/5f87397132a8b02.png HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-998\"\r\nexpires: Wed, 29 Jul 2026 15:07:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BDXgTuE1%2BFoKjwIGLurzbwWdX981zMGxsU%2BQd0b503Q9IrPgnPkZnNZ1TmBQXduhhswhASjtHSBaHUnUyELzRI%2FKzTU3Wb8wySNrPJ%2BoFMhXb0nROY1Tey8cerzyHBzkbqTs\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a135d7c2ec1cb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2456,"size_decoded":3210,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"bdaeb947a2eb31bae0a170559df9013c","sha1":"7fc8496c9bf51eea98dc9060262f87a792a24a43","sha256":"3225172adc122cc7f8f09fbcc94757061330651a485f17091f41726767f7ea3f","sha512":"710a1ac11f6fdb3915479bf6b9eccf34f4dedd8f30e6bed5275f52d1ec634a754b252e385eb9cd388a5a69c64aaf5818c13cb783090ae68a8696af067cb67341","ssdeep":"","tlshash":"9e512b90d3f3d98a7d930935f8b27a34cfda87da97098523ea834854e279442cd24943","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-30T04:48:33.176401Z","times_seen":18533,"resource_available":false,"data":null}},"time_used":1616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1616,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/imgs/advantage_bg.a5d6d444.png","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.304Z","timestamp":1782745680304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_bg.a5d6d444.png HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6307269c-77e9\"\r\nexpires: Wed, 29 Jul 2026 15:08:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dO8jU8tJ7WjAHG59CScwB061Wy5t7yx%2BfbrU3y7dsv1j3Cat%2BfK1MlBK0r53MuuUL0dd%2F09XxSWb3fymyVWQw9kdZZNL%2Ba99QRSk8snALrEgtBTgSSTMVVNzgITq7cjl21Ub\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a135d815ee7ab1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30697,"size_decoded":30546,"mime_type":"image/png","magic":"PNG image data, 1392 x 1048, 8-bit colormap, non-interlaced","md5":"a5d6d444c8524a6d8e39fa1618582284","sha1":"4fda97683b94717d7597718b1e01c4a091f78ff2","sha256":"b2503b762cb8bf80f11571c1a10ac888258b78cc2a3a847780dfecef23dbb39b","sha512":"cfaf1fb56063ecbfc8d8a07ca56e6be8663b32188308ea349debd55b57e847c8005dbcbb1d72dfb8a7ca7873da81e44ed4b993345d673cf78bb3d3045f5cca11","ssdeep":"768:J1+dBPa7fkey90Yf5vWOjCuMg4+26RwDN1OvagerN6gA30Mh:3+dVa7fke7YlV14+d/vageR6gI","tlshash":"dad2e1dcf0f1d689567b11af43f47e48f5a5377e223344a05bade009a28095b3a7b41e","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T15:08:22.092554Z","times_seen":5445,"resource_available":false,"data":null}},"time_used":2176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1228,"receive":948,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_itc","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.455Z","timestamp":1782745680455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_itc HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2lMtDh8pB9tLkAtcfzUJZWRDwUkLh041dGU2%2BN86YA48tHcbbEEIeAvPuUDNaVPI%2FJlp0EB4xsj8jc6e9htu%2FIS7TnRYefCOA4WHNtNDW8BExydd%2FeHfUXOrVgEIjC1X4%2BWd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d816deabb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":849,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T15:08:22.089813Z","times_seen":330,"resource_available":false,"data":null}},"time_used":1302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_eos","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:05.434Z","timestamp":1782745685434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eos HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RcGE64DtNCuUKBgM5mb2gLFFx1S47nrbqDbXCMnzB8G1RjJ9XhV7TgaYYvL5Riqa5BRK0yrKFHOqwYxuRKeIp1%2B7wBKV3voeUA9gD%2F2W30%2BOfWlOsdQf2OYA460%2BGYexFb0B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d835fd0eb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25,"size_decoded":847,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T15:08:22.089813Z","times_seen":330,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_eth","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:09.436Z","timestamp":1782745689436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zBZ5EBEkkBF6U7ZZcmFVMBYALSMl4foMw9ytfuE31RMV5lyf%2BgRo4lHVwu2m2mG0P%2FKfWwB79PqutJCI8fXykzWOLmuUR%2F9l8ZDKD9HN1aA9dkPP%2BUz8Dmf2bAqVWlT9ah95\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d84ef9b0b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":204,"size_decoded":978,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"329c5b3875ad23da4154d5ef2ff12fab","sha1":"7715ab3f09077a894e281d3c4b8ce5a6f426db3e","sha256":"07eadc04dfb5b0112f060ad1d20c8d5ce9e280343c471aea3dbef21151b5328c","sha512":"d4bcb173ee567ca9e7b9f5da6ee888c65c29c1da7598d44269a409d69711c3cd0d4dbdafaf40e8c5df2031d99f6ad58ab9872c0950c2c9e40a6f5ed3775665d6","ssdeep":"","tlshash":"03d022a06f38023a0c32e3c2b8dc230ea94e0082c08182482bfd8b7810fda0c7623c36","first_seen":"2026-06-29T15:08:22.09041Z","last_seen":"2026-06-29T15:08:22.09041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_ltc","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:11.437Z","timestamp":1782745691437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_ltc HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fIUOadKFybIdSPDQFxLSfynhSCd1yTlLQTqJ%2FbhICFScip26MASLROuuT2oYVLZROTT3cZWFW%2BkwYWjDKBhDOu%2FHzNb456uEgatHN56FszLvmsYKnmsICazdbiyjr2w798bo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d85b7bf4b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":198,"size_decoded":971,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"caae90f4a016c6b9c0a72660df16cfba","sha1":"559408bf7cc0750aa0265741b3ee88625c846e7e","sha256":"ff62257320ecee63a7d0b1bea4b3144c9c86dd3defc7681a39ab1373a3918601","sha512":"a01776d6b0662fe7d27cbeb5babc4f1dfc322ad9ec5b3f1a5232bf828b1d3ce0e0ab34318464d6b1a3fcd68485ee946d4bd97e63612829fe848fc4ffde71e15a","ssdeep":"","tlshash":"24d022c07fbc04210e32abd1ace91b0f644d4483c08093899ffe8ab8243c00c3212c26","first_seen":"2026-06-29T15:08:22.0784Z","last_seen":"2026-06-29T15:08:22.0784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.005Z","timestamp":1782745667005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.bundle.min.js HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6307269c-1339c\"\r\nexpires: Tue, 30 Jun 2026 03:07:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rZdJbjWAAQ%2FwBtTOY9f6YA4kc2qPeLoP8rzgStqsIF1AOAg36zMIcu8VsXlOQktE3kJDRk427l3dVjGjhJPIja3girWXzAk0eNwwd6Ez6k6bvZVbH5h0v3riVDwwgXgAK%2Fuy\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d7c2cc03b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78748,"size_decoded":23487,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-06-29T22:52:35.641272Z","times_seen":7846,"resource_available":true,"data":null}},"time_used":961,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Static/img/creator-wordmark.svg","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.013Z","timestamp":1782745667013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Static/img/creator-wordmark.svg HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 13 Jun 2026 04:41:25 GMT\r\nvary: Accept-Encoding\r\netag: \"6a2cdf75-c79\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mvpHXhI2UwCj9U%2BtwvkQ3PJBZK1hGtaVXR3Wy%2FDbJL%2FiuOLxbduMrGtLd%2FQ8Mhz02Fhr1UwUfv4inZ17dDRUjswDMWWt8z%2FKdd6a5OhEqLSHG%2FBB7kqNx%2FUYX5Mo9Eu6ZXsM\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a135d7c2dc0bb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3193,"size_decoded":2186,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c51334dc5135f28026f732bca085170","sha1":"d0f7f35969c52c553a8635164d95cbf635f04db9","sha256":"49cde92fccd9ab44117c8e8db012e658a02c9a48ba6577ad2985e54753013550","sha512":"a62f7ce02ee3cd24d11bb1b1ee8c41ddafef3acfb8653bdb773ba898ceec404c6aa7cc9d9626e49f3af7184315437bf58eda990954cdc91805516e11e812b246","ssdeep":"","tlshash":"cb61a3dd2bf551f4a642f3fbe58911ae1e3b14f62b428559c7707d41e68102e89c0ce3","first_seen":"2026-06-28T09:59:19.59525Z","last_seen":"2026-06-29T15:08:22.093666Z","times_seen":4,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_eth","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:03.434Z","timestamp":1782745683434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tst%2FrE9fSC%2ByNEiNIihoqVrugRMIEAGeMd%2BNpOW6BSCbEa56ciD9X4jWG9jw2tm2fZL%2BaTuGhA1pMGxUeT%2BbCvRFTz2QSlTiOH8V9CbfNsE3OcaBXXBVIobZTRJqtyL6HOpm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d8297a87b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":204,"size_decoded":980,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f74f2a6b881905bf5433c4975bdaf762","sha1":"7555a31d184d30a7b0f95a7bb2add4cfcbd6a069","sha256":"2c13ed03766ea352389bfd6b6d75b5952ac2d6932aa6a9af219568a55a92f26b","sha512":"42cbc35d3f5826b851c537d3224050b7b8857a85458d673d9cc799c9f3b734c1f4d676c7cd755a93f044b9a59f552e2f28d8d6bfd03bc33525ea1ba66b63b336","ssdeep":"","tlshash":"5fd022e06f38003a0c32e3c2a8dc231e6d4f0482d0814248abfd8b7824fca0c7217d36","first_seen":"2026-06-29T15:08:22.094266Z","last_seen":"2026-06-29T15:08:22.094266Z","times_seen":1,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":679,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_btc","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:14.445Z","timestamp":1782745694445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:14 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xMOxQ%2BeS%2F8v4YmoH3A5YjLm110gSbMxV4OI53R3ouB%2FZ1IZrs1d2Hxoc8lwqQ0vzrrPPmbGSG%2BHfUyV%2BXIaq8Ju3VgXqDGTZ5C1ZogbTIPljw7r%2BYL8m%2FNHWUqveHs7f0Uxc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d86e4f5eb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206,"size_decoded":986,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"01b1d979258a7f98115327f3fb24b45e","sha1":"30f4b8a2d50363655d194e9b158c5b6686efdd09","sha256":"342d60815fcc11e7a87f7aac0551ccc57cbdab179710acae0d55f1c4e18850b1","sha512":"024a9397bb07089d77fcdab5ae3c880a1816ceb6babf3d7f3adfc2078c164840f4becfba12615e97323e665825633c112f5292a71c8625cf2f3c2e47ce53e0b8","ssdeep":"","tlshash":"d3d023e05f3d04260c21d3d2acd81b0f144d0443c44743091afdc7b4055c10c332291d","first_seen":"2026-06-29T15:08:22.095249Z","last_seen":"2026-06-29T15:08:22.095249Z","times_seen":1,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/css/base.css","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:46.988Z","timestamp":1782745666988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Home/static/css/base.css HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6307269c-64a5\"\r\nexpires: Tue, 30 Jun 2026 03:07:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZUKh8de8xrd3fXFBZq6yqAdAe%2BClFnHZPJ3gu5kkBvFa44GFYy3upCOEQ0%2B6WF21MBirZMv6GmsX%2FV3wyPnf%2B7qMjLrwtIecKnxhvFkB0Sbyytd3AnYzY9y2gd7j%2BUmNvQVZ\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a135d7c2bbf1b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25765,"size_decoded":6738,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (846)","md5":"8739b7f6cc1db5ea89afe0a14afacd7a","sha1":"f7dc32e9b67f5a0190cdb0d641f141294522fe46","sha256":"446377cfd8abce9140615cc2df1cfd3c2e8f908f179cbe1c7bc6209ef1bd2f3e","sha512":"8daa0f9ebd76dc9e94f4c5cf0acd3380b91abe7186648e41574d747c9cd0bfc2a6c28ba80c0e34ce2aba079782d9061d73bb37010cd77f7f59bc5879a19612a6","ssdeep":"384:BpFiOVTjRmNi2RoLy6IbRiWc2FDwFxYorvRnEkEZ58s8BXR8G8LrB888t7jL5ZBe:Y4cN39FDwFx9EZS9YzqtRB8TF3MDdu","tlshash":"12c295a7dfa30901b81bc5a41ff9ab55236c8017910bdebd7fc53648cf462d898a27c6","first_seen":"2023-06-09T02:38:16Z","last_seen":"2026-06-29T15:08:22.096242Z","times_seen":2248,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/imgs/advantage_phone_ui2.03eb46c4.png","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.309Z","timestamp":1782745680309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_phone_ui2.03eb46c4.png HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6307269c-1fc3\"\r\nexpires: Wed, 29 Jul 2026 15:08:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yOdlcYjm4B0C6ajVxurAKYFC0ctAuDlzxw9WPe%2FkAlfTZixWO8MRdtgfaXdWt7i%2Bw2yI85s91Yp%2B1zg3lrfSlEW1tqsZXdSCF9pTsevhHbE%2FI19KYpQbAWFC5SkhTJSf523a\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a135d815fe7fb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8131,"size_decoded":8835,"mime_type":"image/png","magic":"PNG image data, 620 x 414, 8-bit colormap, non-interlaced","md5":"03eb46c414ca4054d6aa8bcc6146e203","sha1":"1ad3fe2ee83e35506f404b3dc6110540539e32c6","sha256":"98f20bbbd1c55089292d663c5a641e6cb4d02e91149bd3b1dbfa3dc87168d1fd","sha512":"e59d6713424efe87e45984399aab1739b3b1ff7cde9fff91c83582110c669f9bf299ccb30a7286bec64c48243f887f701f27051f9e6e8b4445c9e927505db019","ssdeep":"192:vri1p22NLEFORfDwDmxiEVHkmrogfcftKLatznubkt:vriOMR8DmxiEVkafc4czuu","tlshash":"2ef1afc2d9d35ddf9d9c0b2b34cbf454844249d0eac68d05d74245a8f8be082abe3d9d","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T15:08:22.096804Z","times_seen":5512,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_btc","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:12.444Z","timestamp":1782745692444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BneOXq3T8JSo%2Bc%2Bj75FZzk223DCGZPnTFgAFwp9RmsNSPeqbjofhEK%2BgdndxxhxRTsEmoxV%2B6RubnHpXlhcBdbspXoHCyb8NTcZQC4s4M%2FzGrAVoHGBZbz4sptFFJPn5ZCZ3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d861cd15b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":206,"size_decoded":982,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"01b1d979258a7f98115327f3fb24b45e","sha1":"30f4b8a2d50363655d194e9b158c5b6686efdd09","sha256":"342d60815fcc11e7a87f7aac0551ccc57cbdab179710acae0d55f1c4e18850b1","sha512":"024a9397bb07089d77fcdab5ae3c880a1816ceb6babf3d7f3adfc2078c164840f4becfba12615e97323e665825633c112f5292a71c8625cf2f3c2e47ce53e0b8","ssdeep":"","tlshash":"d3d023e05f3d04260c21d3d2acd81b0f144d0443c44743091afdc7b4055c10c332291d","first_seen":"2026-06-29T15:08:22.095249Z","last_seen":"2026-06-29T15:08:22.095249Z","times_seen":1,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_fil","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:15.442Z","timestamp":1782745695442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_fil HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kfI4HEhRfR%2BrgNbDPE0Za2Ji3nxZH9wmB9VqmmuKcoSMZEt0ScNK9Z2ErPUyBMr1XnHeyDQbxYLMXht3gfnk2o%2FM%2B1i0x%2F4S1KlfARtjg7OSbAzfrBeYlB4m6FYrOrpZuVZd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d8748907b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201,"size_decoded":975,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ea1c8f6b3a1914b07dec871bab3bc9fb","sha1":"46e18ddb772c8e23e0d466414ba90a27a535bdab","sha256":"21668ac97895712b1fe08de2bb8c9a1af4231c0d558108cb38e49ea6ad2350d7","sha512":"d8f09a1035ec808eedeb37d8c1857cdef429dd19ced6ac9f891784a874d8730af497c271e50a11c06735ce1dbeed47a92f18489223c40c67ca1b4b2741d489ea","ssdeep":"","tlshash":"d1d022803f3801261c61e7e194da277fa4cf858680c0970a9afe8a78141c90c332281a","first_seen":"2026-06-29T15:08:22.097372Z","last_seen":"2026-06-29T15:08:22.097372Z","times_seen":1,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.5.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:46.982Z","timestamp":1782745666982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@4.5.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 15:07:47 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 24869\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.5.0\r\nx-jsd-version-type: version\r\netag: W/\"27293-TxSgmmBsmaEfj9oVVk72b3BAKCY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220176-FRA, cache-bma-essb1270029-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3641872\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I7Wj6orCMrdZ6urEM2AtihBmuaTbiBSNLD5p8wPQFoYrUp8dcQi3MI%2ByLpF%2B5%2BbmnFTnxyKWbWaECH0cHFDPD8h9Ia%2FhskhCHUekQAd2JVV7Mjrzze0LDWwDnefxS9bvmnw%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a135d7c2cb871a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160403,"size_decoded":26005,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65324)","md5":"3afe15e976734d9daac26310110c4594","sha1":"4f14a09a606c99a11f8fda15564ef66f70402826","sha256":"680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c","sha512":"aced925c428148809afc07f28442b966a58508ea24d6b7203d87c63aab57df93b28ab68183a5dae0d9c12705e0a484685de5a370099c42788c869db686d0dcea","ssdeep":"1536:2THqIJOT7SyEIA1pDEBi8yNcuSEeA1/uypq3SYiLENM6HN26H:YH9vGGq3SYiLENM6HN26H","tlshash":"03f353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T04:00:44Z","last_seen":"2026-06-30T04:23:36.44391Z","times_seen":25254,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":7,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Static/bootstrap5Slide/scripts.js","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.007Z","timestamp":1782745667007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/scripts.js HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:47 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n0wPSrD9GDObz2eABvoVKSp1%2B2JoZVLpOX7HOA8ZnnLpkdZVZWYGjklcgVJGO4%2B9uOqdJvzELmPZzBx0Qgmy1qS0Pq3lkg08RPZEbX2tTHKubAfnlyau5vBGWM2XvTWDfO%2Bg\"}]}\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 30 Jun 2026 03:07:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6307269c-12a\"\r\ncf-ray: a135d7c2cc06b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":298,"size_decoded":980,"mime_type":"application/javascript","magic":"ASCII text","md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-06-29T15:08:22.098885Z","times_seen":6147,"resource_available":true,"data":null}},"time_used":760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/imgs/icon_contract.svg","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.033Z","timestamp":1782745667033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Home/static/imgs/icon_contract.svg HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6307269c-487\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2tOf7cHkUwqbb%2Bt9CjnQeZPo%2FeHI%2BA1TL24CfNTnjr%2FD18h4a9wVIx6HzQTK8TIf0H%2BQGkUUQm6M59Sy3GULsdA%2BFHCcmNCO355M1C3BghbCLH8zl13GxY6sv9Qp7P3J4PWQ\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a135d7c2fc23b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1159,"size_decoded":1224,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8be2edf2728aa394553b4fd9a44471f0","sha1":"1afec38a2c761fbd902e1de55d280424335aeeca","sha256":"306f962a6980e05ac92e3e8d3b1818e864f5557237541ab81cf2a15c44a190aa","sha512":"cd25567c0782132f9dcf858b252b11d1343a57a747b1bdbb7094b31baa1074528bc86fafeb66ac71997b4f4ae50e20c56373774f0f79fbf4b2ed339be8000ed4","ssdeep":"","tlshash":"b421ce69623543b9f04a82b212c9f47f353e06d8f1cb44c9e5671e20206e82ebca96c3","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T15:08:22.099434Z","times_seen":2589,"resource_available":false,"data":null}},"time_used":1536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/imgs/advantage_phone.511b5ee0.png","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.305Z","timestamp":1782745680305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_phone.511b5ee0.png HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6307269c-4ddc\"\r\nexpires: Wed, 29 Jul 2026 15:08:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VuTomlao6UqQIpGiGhM4E7gyOiA2n7FVZl04pTvhEdN%2FK%2FLbRbQllJ%2BVaf%2Brt47b49cVmKPWeT%2F0hFWpjpe9zWon3QCjlp3Dgboq4nloCR%2Be8uHE4jq6m05pEYBkbNAMpqOu\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a135d815ee7bb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19932,"size_decoded":20533,"mime_type":"image/png","magic":"PNG image data, 500 x 1038, 8-bit colormap, non-interlaced","md5":"511b5ee00b739dea06dc9e55011afa57","sha1":"eb4ebfdfc46829471c2b86dc94b2e6bc83037fb3","sha256":"31b768d13aee263d4de7af1b5527bded34ad208284df0544dfe5fca9d00a41e0","sha512":"54e06fd802883d46f47e6f59f3d795d893ea797d8295c1cbb506b91a46d0d1efa79751a454049c3e6b2ac06dd5a312950658d96fa9f8c3cefd1d46f73e5ebda4","ssdeep":"384:/M6qoHUBFHYEFyqYA3ar7vWF6cCf9X+VFMsTB:vXHULHpFyRxc0X+Q0B","tlshash":"fc92d0c78eb6894efba7c47c81508bf2617a282190e61dd5fa61e3a3b432645db36071","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T15:08:22.09999Z","times_seen":5469,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":661,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/imgs/advantage_phone_ui1.7a062617.png","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.307Z","timestamp":1782745680307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_phone_ui1.7a062617.png HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6307269c-1fde\"\r\nexpires: Wed, 29 Jul 2026 15:08:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xx54IxIke%2FUYGgUrPJbbnoiFk2XGJY0eLJXkAHAc9VEiexG1yb1HuquIrcEr0RTq3h0XDeTf%2BQIAssTAWReWU09IVPbknouiUewyqx%2B5kjrrqlydbzh1uqst%2FEyl6K5qMQRX\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a135d815ee7db1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8158,"size_decoded":8756,"mime_type":"image/png","magic":"PNG image data, 620 x 384, 8-bit colormap, non-interlaced","md5":"7a06261784d3908ab66f836816376de0","sha1":"3ea8a00b11b016e46703e0b873f005eb5e70adf3","sha256":"c6aa1f5b958419cbaa53682faf70d19d2737d2fc3ec58aeda3f83de3802ac4d0","sha512":"fd838b02e21d15d948d357fcea888bc7fe11bbe2d268d82f6b5f14341b2f253f5ffc6f8f34bac7beb7cead9c4780f6d4ee0b1e73db99ad3c681839965c886572","ssdeep":"192:RCD7357jDYAgAY0UKt/wetdU7BxeTKgPG2ZgwPhlTAAAAAI+GpYSTOFgWsh:RC3357ZXt67reegPG2ZvPDgGhCCWU","tlshash":"4df1ae00e21cefc3fdfce446b5a9916f24b44271323294ce50a39b65d8f459fa7966b0","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T15:08:22.100558Z","times_seen":5454,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_flow","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.448Z","timestamp":1782745680448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_flow HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GwgH7L67lsxXk2kMKdOVQYN9dUbZYBVcWLrxuCbabW6ucXK6meYzj4%2FqckB7CK0Z4xFtaddGJ3GKdZ98yydACEshBRoa9dxtGaU%2Fd%2BwMlj9i3jYXglgR1j8X610FIMj%2Fc9iY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d816cea8b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":210,"size_decoded":983,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"de423794d278e019d672cfddb55d4573","sha1":"a2f789c8066c4c0d5b8cc16d4d239e8fafab8036","sha256":"841b91970715e88854b9c6c63f165209c1521b44cf6f7dbe4ea975f6df91b699","sha512":"62dd294addb7a0265b3a311d33e40dcbcb3a0408ca0b25d4ec7750fc29e764aea3748e4c23350e4afe8adeb89d5619310395d781be2680b2ce2341df73d4ab91","ssdeep":"","tlshash":"d5d023f42f39141615b17fd164fa177fd49cc041c080630597fecb301f585147505d06","first_seen":"2026-06-29T15:08:22.101101Z","last_seen":"2026-06-29T15:08:22.101101Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_btc","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:02.433Z","timestamp":1782745682433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZ8ZgcweyvZVBqOwZQyGNkyX%2F9GGKx%2F%2F4UPCt%2BjIeg3QoJGWSYwf%2FmEa5uE6LJGEijPSJqIFu6N4plmoUNc43o5d8LXy1q69HqDCYXZt4tfAFGw5TCuCFsg4djYP93mWNv6k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d8233937b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":206,"size_decoded":982,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e6d9313a803e29f11c28ee94f9c70c35","sha1":"c20f486433f58ba5bd9f46c155121dd43fb14bc7","sha256":"7b1115723c8e4cafbf70d9b83d9749bb57eb30dea7fe5eca7466a93724887ee3","sha512":"e0cfd185dcd8a6fae6b50733626ec5658dcf16667a744791aec90d45263272849d14a43b2022ea8c8161a02905df81895554078071f5e9b355c89fd3ee847b1b","ssdeep":"","tlshash":"d7d0a7c0af3916260821e3d19dd8130e144904828543438a2afed7a8096850c221591b","first_seen":"2026-06-29T15:08:22.102079Z","last_seen":"2026-06-29T15:08:22.102079Z","times_seen":1,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/js/layer/layer.js","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:46.999Z","timestamp":1782745666999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6307269c-4d83\"\r\nexpires: Tue, 30 Jun 2026 03:07:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=84g9zUNrC1R4c2YB748Ig7pT2xFSXTvxq6kmibsnDSRjNNUT9E53NRuU0VrW5pa9%2FOu%2FVMAz95lqArddgD3JpL%2Fu2wJ%2BK2O6swVijhQcMqn2zjj1CDTPlVMBvySVywPRIGTi\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d7c2cbf8b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19843,"size_decoded":7767,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-06-30T03:43:12.196073Z","times_seen":13902,"resource_available":true,"data":null}},"time_used":1219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/xm/5fc.png","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.028Z","timestamp":1782745667028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /xm/5fc.png HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-a86\"\r\nexpires: Wed, 29 Jul 2026 15:07:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e8Upd6ZkTLdv6TvzHxsp0gynGnqwJBu0zrsG4P7lUW3mHmiWi32CpJV97hAkZ1DnOWVOb6mzst5EVC0ACKM%2BsH4tTMwDSpceyXXzGBeqBFgUDIC2OGZQwnhka%2BJzclnGWk%2BJ\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a135d7c2ec1bb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2694,"size_decoded":3452,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"6ad5509616a5fca9f389801052bea3fe","sha1":"5b53d204b7e6066409067fba9fce5202ff20e9d6","sha256":"6becc3abea448b67731610708852a70c3ceb99059b2dee98da3711dc0620218a","sha512":"18729e5d7521224c032a2a7f18c154b1d02905dda6a06dc3a1af5d876bc5f651b78699589772cd6158bc1bfa75aead83b084bca2b06539a3e4cc9b4a6d476ded","ssdeep":"","tlshash":"ed512be6a252222ac78335be8a25f1dbdf560afb123220858088c13aa40f750c98a573","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-30T04:48:33.153915Z","times_seen":19005,"resource_available":false,"data":null}},"time_used":1111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/imgs/home_head_bg.png","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.285Z","timestamp":1782745680285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_head_bg.png HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6307269c-cf649\"\r\nexpires: Wed, 29 Jul 2026 15:08:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lb4Qa88YI2JHhPmPPxbwFMIu24kG4nkUVNO13oIvOLb6xsnkTPgydqHB%2BYJKammhKmqEuH783e9OkU%2BFy8PBUGgl8ZqK%2B0xQF72D%2BUU0vIdCMz8Nm63cmAmIK93%2FXxMruDBV\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a135d815ce75b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":849481,"size_decoded":818366,"mime_type":"image/png","magic":"PNG image data, 4336 x 1428, 8-bit/color RGBA, non-interlaced","md5":"1cbfba6198f4e4ff700eb43de61092ac","sha1":"ff03b54f67e1a0ae20c274c3d06ee52c3dd6ee50","sha256":"618a8249a51b933013f55571d8cdcb16e26863c921c82170e79fcbcb582eea95","sha512":"cb12167584983054c4911ee8604171dc08c8f89fef64c97ef3eb8dca7f424ce7d34b87924419f0e76e7a4b23f231371bef37231639bbb36c71950fdebbae40cd","ssdeep":"24576:2nw3WzrNqGPQiPxmnC+YarisIgK+Xy/6Nn/WMISk:2n+iQGhPxmrY651qGn2","tlshash":"7405224ca0eef889cc125b351ddbcf8d52a430b498ef6719bb63bd20895d9cd6877620","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T15:08:22.10372Z","times_seen":3669,"resource_available":false,"data":null}},"time_used":11367,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":634,"receive":10733,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_doge","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:07.437Z","timestamp":1782745687437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_doge HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kLBsSd3nNcBKnr%2F1ihJJKHqRxi6J7CXOlyIxt0ROkvV8dCYg7Rf3pR0GZcyBuqITff%2FpdS3RyeapeIzQKu61vQRwRAH6wO7nMV33WJmvEqQcoFvCFlNW5qm9P0Jim2N7Eqtm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d8427f8eb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209,"size_decoded":977,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6b44a1a8a8cea9593d52dfe354c79ecd","sha1":"5cc7e34c6352b3c0e917806d8b23a73db2c5fa1d","sha256":"49f0b791f3579a50c30b9af4a6214f1436eac44fe06cafe2a74462ca301e1ca1","sha512":"86aacc6a3fef7d6c227903ee029430d3a1ca3cf2ad30657398311bf870696bcfce262fbf0fac2ab60795b97145acc9a97401e3a7af56df8704afdccf6db2d9a9","ssdeep":"","tlshash":"0cd023d0be7a04250871fbe164d4132e744e4087c043910567fe4f3c145c30c3627919","first_seen":"2026-06-29T15:08:22.066387Z","last_seen":"2026-06-29T15:08:22.066387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_eos","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:15.438Z","timestamp":1782745695438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eos HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8fLCMllAtd87NiuyWETKaRyph5J1jAkc3MZ820cb425f7Xs%2BP0c6ICXq8SMMc9VWP17E5g2TyW6%2FXBP%2BnexKR734AJZV9hPfKSBPMrOmvyt592EqLdbE4NFP0EB0Of%2BsLapd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d8748904b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25,"size_decoded":847,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T15:08:22.089813Z","times_seen":330,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/imgs/community_bg.png","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.312Z","timestamp":1782745680312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Home/static/imgs/community_bg.png HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6307269c-3c99c\"\r\nexpires: Wed, 29 Jul 2026 15:08:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4CyDDnMsH%2BtX2yzZ3oMMbzsV0nFB7qlPyahjcKfHWEZpJCfBQmVzCJzHwjAnR%2FViJkmB5dOGHg1EpH3F%2BE8cv7gHIykzGeb%2BE9VvrNV%2BrQjCaBesfbjYTzGoQQu3d70kXBPK\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a135d815fe81b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248220,"size_decoded":237571,"mime_type":"image/png","magic":"PNG image data, 2892 x 936, 8-bit/color RGBA, non-interlaced","md5":"3107a5d7de66ac526ba295a6ccb85e2f","sha1":"7ca2f1ffe3ed6dfd6260e8a47643d30d6223aeb9","sha256":"1021f5b23b901a121fcf0f78866fb66c978411d309aef421c54af4cb09ff1b6f","sha512":"262a6554428da7f2bffcc71915ee13f5e9a504a2e76af61499ba7ec68713fdbba8b2f52d9b6ff8a9b13ae649103c6aaeb2e89f0dcf5411ec636a7c6ca5c26f7d","ssdeep":"3072:2cI5zu8n4youkJkjKrt88rRhc0ZmoZ/UYO5+90yCOo9XHhNkHLfuZVrD0BMdJ2oo:2V5b4G0ks8ybkwT9vBo9R2iP30BPdb9","tlshash":"73341284fd1e6df6cdf40db008629f4c7935a6ad8835d713a3b6e15d9eb754008be680","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T15:08:22.104262Z","times_seen":5165,"resource_available":false,"data":null}},"time_used":8449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":7939,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_btc","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:08.436Z","timestamp":1782745688436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dLgvLHtLufVLGU%2FjpgCvRYcSDgM7NYgTuOhrsZCvutO2O%2Bblph7Ex8rj4qS8lSv0pDy4f1T4ho0WzSbfJR0%2FteOC9NFJifsVpJHjv8O1%2BiC3z2iWV1JN14q2JGrO7%2FVpZOjs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d848b8e3b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":205,"size_decoded":981,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fb6a77548690119ad4c39ba8e12b8bd7","sha1":"010898cb03f78d9b3e807d11fe02c2e750f8781b","sha256":"1c71ed72f84f5f625857129afceda147bab6419fb6555dbbb6746cefa50bd149","sha512":"0d329585cd037739a0dbd5f1b9c2b63de21b4d981ebbc755880ca1ac77b41f00f9e39b7affd51c35dba2d0b8e662e348198025a96017abc8904a2558a1571022","ssdeep":"","tlshash":"e4d023c05f3d05260c31d3d1acdd170f5449544584c3c34a5afed7f80d2c51c321191e","first_seen":"2026-06-29T15:08:22.068858Z","last_seen":"2026-06-29T15:08:22.068858Z","times_seen":1,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Upload/public/629c72d268234.jpeg","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.017Z","timestamp":1782745667017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Upload/public/629c72d268234.jpeg HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-16932\"\r\nexpires: Wed, 29 Jul 2026 15:07:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q8DhxixuyIuBrkK6viS1QKt1AnBOXgfuN2MCa4ohCLmqtSZmcZi1RHSS50GZeJV2sSwXQKfxXTQO00HbVbIhPQtMEhpdrjYlYnUY5b00Klwz%2ByZuPQ%2Fh2ICeqX9655oAyX1s\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a135d7c2dc0eb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92466,"size_decoded":92725,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x300, components 3","md5":"d2ec614dd56337288a48c3504872d752","sha1":"1fa9772c7f2eb6e93fe1edeacef816b6850507fa","sha256":"d4ca7b176180c645d813c294b8174fe3c58a9cf83db951b5b8fb6f1ba9cb2cfd","sha512":"ffbee79889cffadad6106cf0535965fb5a5ce7e39b16a1998084d38aad60f4ecdb1ff0d2281fd34e999ccdd04c3d2cc25bd7aec119a58c18e5cd91b8174118a3","ssdeep":"1536:M9qKZoxlS00K5Xr6B7rdSKgWoCL8DyWKl7mfmxnyKqhvYPZmXxilegMMCdDIDG7:QZygKUFlgWnLV7ImxnV/P9C1r7","tlshash":"72931296b38a4919e7697732485ec1e073f29ea0be451fae51f3c478c8dd032b117a39","first_seen":"2023-05-21T16:18:43Z","last_seen":"2026-06-29T15:08:22.104808Z","times_seen":4451,"resource_available":false,"data":null}},"time_used":4505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1550,"receive":2955,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Upload/public/629c72d72bea1.jpeg","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.018Z","timestamp":1782745667018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Upload/public/629c72d72bea1.jpeg HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-2044a\"\r\nexpires: Wed, 29 Jul 2026 15:07:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vFe7Pbfah42zztVruayj%2BHCHhL29AD9DRWTMd9LzCzeob85bgf0rOqf%2FHDpJPfI%2FA076NtDpHQgpzMucYU%2B5CpsJRsZ78ePpA34KEzbpKlsAlL4mIO0URd5fwyKzZu%2FVP5u7\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a135d7c2dc10b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":132170,"size_decoded":120825,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 750x300, components 3","md5":"dfde2097912178e1ade955a1479e4158","sha1":"2a46f5160255b5b99a32ffc7c0dbec89a2ff98dc","sha256":"09dce8313f5e10579c1f58032cc3397cb4b253cf9d4c8a0b858402cef5d397a0","sha512":"34b2608914c24f8754a8097b7cb752fa1960934c3be9270110cdc6d492ba99ddbf086d4c61c29789527849041d824979186f6e0af199f8efd181a22a11d2cb07","ssdeep":"3072:aJmM1CFqby70UZh28jBlZQZLoSMi60EL5+DuWXqT1mBkOZw0C1oPSnWnWnWnWGH:9MGw+FjBl6LoSMi/Ed+DuWXqTox5CSPb","tlshash":"8fd3f130ebcbdb061b9f446888fdac23076a19f811de90166f250df5f5cabb554424bd","first_seen":"2023-05-21T16:18:43Z","last_seen":"2026-06-29T15:08:22.105363Z","times_seen":4482,"resource_available":false,"data":null}},"time_used":4839,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1684,"receive":3155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_doge","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.434Z","timestamp":1782745680434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_doge HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2BjVsoQaodrkXl68zdsxaF88j1YMhjpIFTff6q11GdjmLjq3aWO0BvkFFnXe8xOzQG6qbCjx6XpFt%2FLRz1FDyNKIonKoftB%2BNAcVK43s6cXYrWIJ1tg0Elq9jqm57osNBCep\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d816bea3b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":209,"size_decoded":979,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6b44a1a8a8cea9593d52dfe354c79ecd","sha1":"5cc7e34c6352b3c0e917806d8b23a73db2c5fa1d","sha256":"49f0b791f3579a50c30b9af4a6214f1436eac44fe06cafe2a74462ca301e1ca1","sha512":"86aacc6a3fef7d6c227903ee029430d3a1ca3cf2ad30657398311bf870696bcfce262fbf0fac2ab60795b97145acc9a97401e3a7af56df8704afdccf6db2d9a9","ssdeep":"","tlshash":"0cd023d0be7a04250871fbe164d4132e744e4087c043910567fe4f3c145c30c3627919","first_seen":"2026-06-29T15:08:22.066387Z","last_seen":"2026-06-29T15:08:22.066387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_bch","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.439Z","timestamp":1782745680439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_bch HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aOGu9j474MBm6DMycRVCC%2Bi%2F7SLniDDxm8X1Yk6z0KOBBDvppEVBvjC96L8EfQTYpEfFJFDKKsmID22MiwEPR92Zlrek%2FQIZ8ujkkQd9d6GCRHgQVMMgCuoXfiELoWq4ADGO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d816cea4b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":206,"size_decoded":977,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"081fefd2339cd6eebafd545d6e7633d4","sha1":"c50b71f686e768aa467759329bf43963ac9c9ee3","sha256":"c168083e687b4e4cc1bb4839ae1a4eecf34585703c1640cb62fb0edafb29d8bb","sha512":"4c64593b9cd15a5b6f250efc0d8e6a31d3b1234bdd16a4c6a39deb91dce4e14adc8fc7f1d1e33b6687c7bf10f8c8fb3e4ec37b254dacc0ba794bc256e4192fde","ssdeep":"","tlshash":"9ad022e83e39452902726bc3b8fa03be285d8449c08283015bffc73036ec128f206c3a","first_seen":"2026-06-29T15:08:22.105903Z","last_seen":"2026-06-29T15:08:22.105903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-29T15:07:45.835Z","timestamp":1782745665835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: private\r\nx-powered-by: ThinkPHP\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w4Qg4oLnP%2BObGaBB%2F0xJBmVqdjOD7yKdLmNbUqPQVVoWlwKAEJnWb0UnvobWX3wX4fA57BBTeEY3mytGYg2NNHsHAA1QIZYevsYUSfcn2Wh%2Bcsg%2BNwXF0UYVzN7BXyjUXY4d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a135d7bbbaf6b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98863,"size_decoded":22439,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1278), with CRLF, LF line terminators","md5":"626c9225548f6f3d3820215333dc8766","sha1":"90d9b344239fe4c971b4ea372fe6809a2e956ab6","sha256":"c98fef504f317edc853e0f15bd78d82a4ca45cc069152e0336d805cd03f9ead7","sha512":"5739c29f80757bc71918854f8f31c151a467b6c01c96b4edfa18b73accb976f6d46bce8a79aed8ea05fd0f238e66028b18937490cfcd2c370b05591cfd7c55f5","ssdeep":"1536:QSdVwbS2uPe938Fvfogyn5nyvkZqpQrSnGBO:hUVuPKXGkZwTnGU","tlshash":"30a32860f39c093e2067109b9ba452d5b6ba9473d71bc1153ebe96602f86c58da333fc","first_seen":"2026-06-29T14:55:35.069885Z","last_seen":"2026-06-29T15:08:22.106886Z","times_seen":2,"resource_available":true,"data":null}},"time_used":802,"timings":{"blocked":-1,"dns":16,"connect":17,"send":0,"wait":688,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/xm/doge.png","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.025Z","timestamp":1782745667025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /xm/doge.png HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Jul 2022 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3216c-838\"\r\nexpires: Wed, 29 Jul 2026 15:07:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Od%2FL7VPZsOJXd9VIJWbtiZv%2BwycSD0Crk77vVNfVv%2B7dAyK%2FxL7uMTKS86ruIWJxZBMtHbJN4uVXwvtvvi%2FpFMfm8Wn%2FqTgJCx35i8jkn1ShGgaSFtBgFV3vdazXeg8vGB%2Fm\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a135d7c2ec19b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2104,"size_decoded":2915,"mime_type":"image/png","magic":"PNG image data, 61 x 60, 8-bit/color RGBA, non-interlaced","md5":"ff0c62c872d877837881793431cf064c","sha1":"8ee9cdfe43cfba24078529fa23984ab9e9d99a76","sha256":"c146f8822178b5581dd5eb80071e9824e1634252a4cd0d25b9675b0cb3da570e","sha512":"2416ae2389993012befe574c4ee91c47b6101f3e89b7582d25ce214e248e5305f327183c2a7222259b9aeae09ff7315edeae1ff11c8be3304ca11d5cefeb09ff","ssdeep":"","tlshash":"b0416e07f3ddbe79ccd66bb71348e024d01ff7e1b8010b98a42a4c565258c6f215c44b","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T15:08:22.107586Z","times_seen":5380,"resource_available":false,"data":null}},"time_used":1028,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1028,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_usdz","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.460Z","timestamp":1782745680460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_usdz HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IQR3Cko3JI8ePg3EyP30VznasMlH4bfrKe5SG1jgGz1QvFxG%2BmIvKZscdJl4RSrPiWmjoU6c0%2FEbsnLcmZ%2BOj3tP5ufo7dSj3rB%2FXR5BMmnJqwhF8Rz09%2BlsEYGlx96EtQzv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d816eeadb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212,"size_decoded":959,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"86bb4fb4548fedc2058372dd347ef2f6","sha1":"cf5023b5bc6e47dc2e02a3df40b884088dac99e5","sha256":"b8526b7407ae36d55085c42b9d34a50c45175f9c84bd7c4c1eac60c647ff7599","sha512":"a4d055e3f91966590342fecfe467dbda18e98b394e7c1ce86ec05abda34d0b13d55f58356b66a8ecc678f52b41df78ad2e809e0bd828d3125e9f3d6778899303","ssdeep":"","tlshash":"37d0a9e02e381021c0b26bc0a4f8326a648cf04e84c04709daeec7a0256c024b006d02","first_seen":"2026-06-29T14:55:35.068182Z","last_seen":"2026-06-29T15:08:22.108094Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_eth","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:12.440Z","timestamp":1782745692440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DTHFQPZaAFxOzmmWIFEpfNzDQEhVFzqsygdu7DEnqZxrIVHPxX46AVPPPk4VGKAE8SVBpFbB7koGbKGg1%2BL7Rn4cDWav4FKx53qBerXzEA8kaJzJFrd6b6npfwOt44aqMCy9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d861cd14b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204,"size_decoded":972,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"72e6f8114333018989c9cbf40bfc8277","sha1":"8f6b66da82b21b23ac0cfad0014ba0da9cc2f66d","sha256":"ae55608e3aba0fab9ca2627d916118bebddb59fd0ca9771ab759f12fed7f1e6e","sha512":"65feee4fc201b7b7609b4a945e90c6ef26b02601b53d4569f32d13ca626c0524aa0b9cb3b752445a94972d8ec273a19ccec0e7205de556c26120750ea3495556","ssdeep":"","tlshash":"15d022e06f3802390c72e3d1b8da270e594e0486c0c6824a2bfd8fb814fc60c3222c32","first_seen":"2026-06-29T15:08:22.108842Z","last_seen":"2026-06-29T15:08:22.108842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/app/static/code.png","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.016Z","timestamp":1782745667016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /app/static/code.png HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 11 Nov 2022 17:23:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"636e8506-81c\"\r\nexpires: Tue, 28 Jul 2026 09:58:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 104938\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8V82B4HdRhU0HWnWdmfp8T1oAob10dcxHKb97eCjOT6aCl4%2FUzaG3wvjaQB6I2Wqid%2F%2F25mJZ5FdvKhqWVy6zhsKpnyq8r15ZUfZgjSRCnu3OypxS0eNzS6eqNwZlBftBix%2B\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a135d7c2dc0db1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2076,"size_decoded":1873,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"9990f44db175aac025413ede140cd263","sha1":"3733ff4381ce0c0e7f82ab4accfd564e0ad1c2cd","sha256":"bb4aa9ab4393b13d2e3bf8ef6d4da246991de05f1edae0b36f77e0193235b7fa","sha512":"fabe82eaa72cf86346f260e316048f3bf520cdbc0d89696a46fea6d0d799e59321fa44153ce368b5e16cef60c43f223efc418c95b69fa900645dde6971c55610","ssdeep":"","tlshash":"aa4108b4e1d26969bb71b99b99c32bbffa5444e6ec7d40f18001940d9dc1a28f88637c","first_seen":"2024-08-23T09:48:32Z","last_seen":"2026-06-29T15:08:22.109852Z","times_seen":12,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/imgs/ios_down.e011cb37.svg","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.300Z","timestamp":1782745680300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Home/static/imgs/ios_down.e011cb37.svg HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:00 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6307269c-2edd\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FIUq5bZS5KQi187JtfqQS%2FnfzJ7uDfdRTZzbM1hGsVQAMZBX7OLyD46GldqEbFq2xxBKxvjn5faMbOrGX50I1fcS0aM0fTBTb9evzURwsDn2o2kyEGPZsgovWicBW3fz48Fn\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a135d815ee78b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11997,"size_decoded":5289,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e011cb37e1cdc749fa40e455f952c628","sha1":"c102a94a6beb0a26de83c2e21ab6ab409f265e88","sha256":"5b8c67057adbf739c8bbe363ef30d3e57638991690cd9930aa237e5b408849ac","sha512":"a92a160de1026815ca8078f6cc059fb8fba29284a5c792295a9755e8f6e3c10ae138c90b0cac9774f35cdf430106e4a7ccb5c88729e9750e867cf826479001fa","ssdeep":"192:sb39cIK/24cUfDfcFDOlozy6RWSmwQn0F3TRe3nclNXAJdlIPprWl:2mIK+OrcFKozy6RrIni+nKNXAXlI0l","tlshash":"9b3255f79354c0c4791e99e5cc3f1ae93a0ef0fb9a81a08832ade841e753ddd865ad44","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T15:08:22.110416Z","times_seen":4117,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_eos","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:10.437Z","timestamp":1782745690437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eos HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGz4aYV25IvS1TU8w1uIpW2S%2B1GskxibGrNUs99bUC%2F6Qsamf66cBxh2TsGp5uiteprxHTVZvFHUdiqnTac0u1vchEflnMNDaiyBCq16KO8V2MNOldUeoArp2VsqVgrB2%2B7g\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d8553ad4b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":845,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T15:08:22.089813Z","times_seen":330,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_btc","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:16.446Z","timestamp":1782745696446,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fHOnLRP0hwlqers7W0WoG9nzElPUR0PgsHMRMrqag9YWXX3cd7ST82EdolNBnYO8yv0HPPSApp7HI2hDkXvENIAt7zSF%2B3ucXzl6ViAqaQcGv%2BJMPZF%2FCB01X2rJJQ%2FR97Qk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d87aca76b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":206,"size_decoded":980,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"01b1d979258a7f98115327f3fb24b45e","sha1":"30f4b8a2d50363655d194e9b158c5b6686efdd09","sha256":"342d60815fcc11e7a87f7aac0551ccc57cbdab179710acae0d55f1c4e18850b1","sha512":"024a9397bb07089d77fcdab5ae3c880a1816ceb6babf3d7f3adfc2078c164840f4becfba12615e97323e665825633c112f5292a71c8625cf2f3c2e47ce53e0b8","ssdeep":"","tlshash":"d3d023e05f3d04260c21d3d2acd81b0f144d0443c44743091afdc7b4055c10c332291d","first_seen":"2026-06-29T15:08:22.095249Z","last_seen":"2026-06-29T15:08:22.095249Z","times_seen":1,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Static/bootstrap5Slide/bootstrap.min.css","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:46.989Z","timestamp":1782745666989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.min.css HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6307269c-2f0fa\"\r\nexpires: Tue, 30 Jun 2026 03:07:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FWSnqMC6Ldi%2F0XOHw%2BMkMYW9sYQX84Xw7aphnTH6SQkt8Xj557OdWwaKdj9kjgSUG70cMwRTzIJAOS50UKdBD0FojbCJz04fttJqxRlvXi%2F8Kszoxcz1OlUYvm5qNM4kV0X3\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a135d7c2bbf2b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192762,"size_decoded":27791,"mime_type":"text/css","magic":"ASCII text, with very long lines (65184)","md5":"cb46b85888b78de64c1f51bc7797aacb","sha1":"e57147e69810b9ee63af657969ddfd6c456957e3","sha256":"652650f2c09a63e822932e07d79583c64a996e44ff680e2a9183c2a7c5b2531e","sha512":"cdf48d3e0b60cd162995316ce921e3285248d481378251f13403c39302baba3efe6332a537cccf255e2261b8c39d719ab1a9efd83e97111ed321e11dd0eefdb1","ssdeep":"1536:rQGFA+QbGwz48MIEtQ12c2Jsj+aeHYAVmJz600I40Yw:rQGqAVmJz600I40Yw","tlshash":"311492a7f581201ee493c10995d2bffe057f9586d3021baaf42737b44b452eb8a63e4c","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-06-29T15:08:22.111018Z","times_seen":3281,"resource_available":false,"data":null}},"time_used":2182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1979,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:07:47.003Z","timestamp":1782745667003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Home/static/js/jquery.SuperSlide.2.1.1.js HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:07:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6307269c-2c9e\"\r\nexpires: Tue, 30 Jun 2026 03:07:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AHIEiOnlR3lAaGyHf1hV4oG68VrOB7xB3Y3uW%2FR%2FAQuhbylPxmKEcM%2BKv7acka%2BXIYqCtmjjBB5T5H8zl3K9HzmZZtrC4f18UfccnU3Z2uk7Ifdro5XCnGwvzxUhFwtjEr0E\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d7c2cbfbb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11422,"size_decoded":4503,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10855), with CRLF line terminators","md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-06-30T03:00:57.562199Z","times_seen":13997,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Public/Home/static/imgs/android_down.d99dd6cc.svg","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:00.302Z","timestamp":1782745680302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"GET /Public/Home/static/imgs/android_down.d99dd6cc.svg HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:00 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Aug 2022 07:37:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6307269c-2d6a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qNs5vqzDDsR5L%2B6RAhg70zFHp6DpE8Bk3WtNP2r5kgvEtLRlM%2FV2cBrYfvB26jZ6J3rpsYcQ7o20%2FlRxJU0CpLtnT4qnT91SMci7g1zft10lfTvBgzPtQaIi0y31MLR3m2uE\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a135d815ee79b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11626,"size_decoded":5081,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d99dd6cc9eeb67a17b5f64eee801202c","sha1":"6e11cb75b0529af92236763785b69749f62fee4d","sha256":"dc8a78d121b34f655fc063f43d4ef8cec3581d8539369f35f2ae0258a5735954","sha512":"fea5046497f492375a2bde60559ebfb91f67e52685d5b8055c2fd585809cfc98c3bf1a2bb0b20aa00e390c75533ba327d1b66194709fffe3c236fea363c0aed1","ssdeep":"192:Wt1zfau5v7dYMyr8R0tjFnR0tmWi2C/FNNW6xX8jVCZVzLQTsMH6IL:MzfhzS8+pn+mW4FNNFXZZJvw6IL","tlshash":"693255e793a4c0d0690fd5b5cd3b5ae43e1b70fbafc19058326dd944eb429d68b06e48","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-29T15:08:22.1122Z","times_seen":4135,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_btc","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:04.434Z","timestamp":1782745684434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uExbixwTAsWKiXfgQ2MwD8CmqteLJ%2FQj4QQIrwHqEgfJFjv1eK6Ogghs%2BiwbW6mkZmGMyANrKThZlvA2JnFx0KxnJVgjUNU1JGoLm7gigxgpEgYBlmjs7LuhsmgedRHWhCRZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d82fbbbbb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":206,"size_decoded":976,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e6d9313a803e29f11c28ee94f9c70c35","sha1":"c20f486433f58ba5bd9f46c155121dd43fb14bc7","sha256":"7b1115723c8e4cafbf70d9b83d9749bb57eb30dea7fe5eca7466a93724887ee3","sha512":"e0cfd185dcd8a6fae6b50733626ec5658dcf16667a744791aec90d45263272849d14a43b2022ea8c8161a02905df81895554078071f5e9b355c89fd3ee847b1b","ssdeep":"","tlshash":"d7d0a7c0af3916260821e3d19dd8130e144904828543438a2afed7a8096850c221591b","first_seen":"2026-06-29T15:08:22.102079Z","last_seen":"2026-06-29T15:08:22.102079Z","times_seen":1,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yourcreatork.com/Ajaxtrade/obtain_bch","fqdn":"yourcreatork.com","domain":"yourcreatork.com","tld":"com"},"ip":{"addr":"172.67.185.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yourcreatork.com/","date":"2026-06-29T15:08:09.440Z","timestamp":1782745689440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yourcreatork.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 06:07:46 GMT","end":"Sat, 26 Sep 2026 07:06:15 GMT"},"fingerprint":{"sha1":"5B:B4:9E:1F:2F:B3:69:8A:A1:74:51:A0:9A:36:AE:DA:DA:6E:DF:34","sha256":"66:0D:D3:2E:6C:5A:3E:08:E2:76:E1:11:3C:C6:D2:06:C7:AA:92:C4:66:36:54:9E:31:BA:BE:0C:09:55:66:B2"}}},"request":{"raw":"POST /Ajaxtrade/obtain_bch HTTP/1.1\r\nHost: yourcreatork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://yourcreatork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yourcreatork.com/\r\nCookie: PHPSESSID=emifsr4j6u00tfha73tljh6q85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 15:08:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=maNGvMe5nmLNIoyikny9t9khqKNo51k7osmgvAGszwhYcuciNY3RWSlzjV1Ihl%2BvgDBDhmkhzYPdkXqD7nn1ICKZW1AwkoQ2rBfSu%2FOeD8505Z8os0GVQ8sNeM5%2BIO08ae6m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a135d84f09b2b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":206,"size_decoded":977,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"081fefd2339cd6eebafd545d6e7633d4","sha1":"c50b71f686e768aa467759329bf43963ac9c9ee3","sha256":"c168083e687b4e4cc1bb4839ae1a4eecf34585703c1640cb62fb0edafb29d8bb","sha512":"4c64593b9cd15a5b6f250efc0d8e6a31d3b1234bdd16a4c6a39deb91dce4e14adc8fc7f1d1e33b6687c7bf10f8c8fb3e4ec37b254dacc0ba794bc256e4192fde","ssdeep":"","tlshash":"9ad022e83e39452902726bc3b8fa03be285d8449c08283015bffc73036ec128f206c3a","first_seen":"2026-06-29T15:08:22.105903Z","last_seen":"2026-06-29T15:08:22.105903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"yourcreatork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}