{"report_id":"a11e7de9-3a30-4ba9-be62-61b60e9c1e94","version":6,"status":"done","tags":[],"date":"2026-03-05T18:36:35Z","url":{"schema":"http","addr":"cebershoke.com","fqdn":"cebershoke.com","domain":"cebershoke.com","tld":"com"},"ip":{"addr":"172.67.175.216","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cebershoke.com/","fqdn":"cebershoke.com","domain":"cebershoke.com","tld":"com"},"title":"CYBERSHOKE","dom":{"size":24558,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2655)","md5":"6bbd3d8941b729589adde1c57d5f5da0","sha1":"2ea23777af5bdd76f9990d42cda248d5ff73c96a","sha256":"dbc5e694d4e7e1cb326ea43f717c24ff2a17188870cd2602d6b4d163e3743e5d","sha512":"33f345ce1e07424aa9e361977e3441d42514b920c6e9c2596be883f443f386316aaa9b72ee71cf10d33799bccab92183f51063384f2fdb6584050ba7fd112332","ssdeep":"384:++lbHQelwhnelwnlPpPwZ9s7Ms1SurlTA5jkOncWWG:++xQ5hn5FpwZsMCSQTAeOnAG","tlshash":"38b2f9f193e492e4a103c760e53668757d1634fb6f458798b3ec9fa0af2159ec88bc84","dom_hash":"domhash00922a13c755e5d735c05c51606f9704","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cebershoke.com","fqdn":"cebershoke.com","domain":"cebershoke.com","tld":"com"},"ip":{"addr":"172.67.175.216","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-09T18:36:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cebershoke.com","ip":{"addr":"172.67.175.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-05","domain_rank":0,"first_seen":"2026-01-10T11:30:23.723614Z","last_seen":"2026-01-10T11:30:23.723614Z","alert_count":22,"request_count":11,"received_data":6301237,"sent_data":4917,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cebershoke.com/","fqdn":"cebershoke.com","domain":"cebershoke.com","tld":"com"},"ip":{"addr":"172.67.175.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T18:36:12.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cebershoke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 20:07:30 GMT","end":"Sat, 25 Apr 2026 21:06:07 GMT"},"fingerprint":{"sha1":"39:2A:E9:CD:F8:42:2E:29:C2:1E:E0:4E:D7:0E:32:EB:FB:6A:E4:84","sha256":"F4:0A:9B:50:CC:C0:78:F4:59:C0:AC:E1:E7:42:3C:CA:78:DC:47:2D:D7:55:D2:04:E7:D5:14:D5:C1:DA:A0:94"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cebershoke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 18:36:12 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dz1YbkD%2FRfDGRbwmecRj6steS3Pf8E8NLcNyjY7LcBApX3aWqIDz14ulM%2FLdSDvU8bOLn4imrle2u5VT2KjR6WX0kcCM6dxQT6jv0LDD\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d7b3993ba4835cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26234,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2632), with CRLF line terminators","md5":"fe3e611ab672d7475205e042ba42bcb4","sha1":"aa2b8469363f53f4621ebecf552835618a5e5bf0","sha256":"7666e5f9809f74953373b7671184b9c2a10156c560ab66d47ad13eac6cf74f12","sha512":"e2d9f59645e6816073122c3848254e2fb7a7df24bb771a7d1f7e954ad0fd584b49f017b0edb14a7a0ce25f21afdb33a131c9a9d11bf6407c94aec412b33a4cad","ssdeep":"384:PDlbHJ1elwh0elwnlqdPqBLCw7MRhSurlNAnjkOn7Mek:PDx35h054tqdVM/SQNAIOnbk","tlshash":"80c2c7f593c462d49103c760e9366875fd1620fb6f46879873ecaea2af3155ec48bc88","first_seen":"2026-01-10T11:30:28.206126Z","last_seen":"2026-03-27T15:31:46.521777Z","times_seen":6,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":57,"dns":24,"connect":8,"send":0,"wait":82,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cebershoke.com/css/style.css","fqdn":"cebershoke.com","domain":"cebershoke.com","tld":"com"},"ip":{"addr":"172.67.175.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cebershoke.com/","date":"2026-03-05T18:36:12.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cebershoke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 20:07:30 GMT","end":"Sat, 25 Apr 2026 21:06:07 GMT"},"fingerprint":{"sha1":"39:2A:E9:CD:F8:42:2E:29:C2:1E:E0:4E:D7:0E:32:EB:FB:6A:E4:84","sha256":"F4:0A:9B:50:CC:C0:78:F4:59:C0:AC:E1:E7:42:3C:CA:78:DC:47:2D:D7:55:D2:04:E7:D5:14:D5:C1:DA:A0:94"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: cebershoke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cebershoke.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:36:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 05 Apr 2025 19:42:03 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"67f1878b-ad37\"\r\nexpires: Fri, 06 Mar 2026 18:36:13 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BDzKxoWgkyURDCIe40lWAdeNpt7MMd7r0g1vB0MN6EgknvZB%2FWLc9nSkuVmUgW73SfHlT80m5G0IQ2gCR3NtKRt4oTb8luWK9s0o6wEg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b39952a08eff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44343,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (315), with CRLF line terminators","md5":"f2c6ea12bd6dfed957a2384858121210","sha1":"4840dcbf183c52ed613a22668a1b0749aeeb7f51","sha256":"38153efd60f851e51525212cf158e8fe79a0988fc36716628b47b224d60c13e1","sha512":"1fb856bc2933033f27a24d03e492138e27480eb64afc913c7066e1d9aba60ad9fb30c4d8615da83a5106c09f2bc9b9a7a70b2176cde3aa9bd656b27b2ca30c21","ssdeep":"768:LDJCrauDxewKqtJb32kUFkLYWscfcdaxz/TcHynNBvle+6ARRxEcIr0433kHEu98:Jp7tVLMw","tlshash":"9513f281040a5112aab30ed2b3ca7e71fe0e2026668552747bfd2478ffdad325275b9d","first_seen":"2026-01-10T11:30:28.197526Z","last_seen":"2026-03-27T15:31:46.514693Z","times_seen":6,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cebershoke.com/img/3.png","fqdn":"cebershoke.com","domain":"cebershoke.com","tld":"com"},"ip":{"addr":"172.67.175.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cebershoke.com/","date":"2026-03-05T18:36:12.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cebershoke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 20:07:30 GMT","end":"Sat, 25 Apr 2026 21:06:07 GMT"},"fingerprint":{"sha1":"39:2A:E9:CD:F8:42:2E:29:C2:1E:E0:4E:D7:0E:32:EB:FB:6A:E4:84","sha256":"F4:0A:9B:50:CC:C0:78:F4:59:C0:AC:E1:E7:42:3C:CA:78:DC:47:2D:D7:55:D2:04:E7:D5:14:D5:C1:DA:A0:94"}}},"request":{"raw":"GET /img/3.png HTTP/1.1\r\nHost: cebershoke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cebershoke.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:36:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 113589\r\nlast-modified: Sat, 05 Apr 2025 19:42:03 GMT\r\npriority: u=4,i=?0\r\netag: \"67f1878b-1bbb5\"\r\nexpires: Fri, 06 Mar 2026 18:36:13 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ClMF2A8dMDleCcQh20rFDJdtLQfywr09iHwW%2FhdvEuK%2Bepinoy4fCnak8a17F%2FtlcNRRX48ScYJwkyEAg8XGHXbMEPAczJpX5PKht6K8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b39953a11eff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113589,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 660 x 257, 8-bit/color RGB, non-interlaced","md5":"d610254a028bb89e6fe79cc60073e58c","sha1":"4150577680a348be6863173c32945cdcee27e7bd","sha256":"4a1eaf73d43970b8019378f1123397e1390d52c84ce3e1dc149f08a97420e623","sha512":"a006eda875ce25355ed818736ef3490631037c4e71e8bebf7bb612d008c47f6e53b5fc80507086ab31a927fc2903d674471a30f74f8232d49449b974f8065615","ssdeep":"1536:5trX5aRRHBHbupZSQxRAcvWDmRoH76EsEOsrAT+CrDEvDj7Sjr5NSVk1TbeIcN+s:npiHFbupZSoAcvWDFmZKeDE6rv7VA7","tlshash":"d5b312dba998e1a7985033f16d6087528937e480a9efa05ce0ccb05e95f4736d470b5f","first_seen":"2026-01-10T11:30:28.201845Z","last_seen":"2026-03-27T15:31:46.519998Z","times_seen":6,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cebershoke.com/fonts/font_14.woff2","fqdn":"cebershoke.com","domain":"cebershoke.com","tld":"com"},"ip":{"addr":"172.67.175.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cebershoke.com/","date":"2026-03-05T18:36:13.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cebershoke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 20:07:30 GMT","end":"Sat, 25 Apr 2026 21:06:07 GMT"},"fingerprint":{"sha1":"39:2A:E9:CD:F8:42:2E:29:C2:1E:E0:4E:D7:0E:32:EB:FB:6A:E4:84","sha256":"F4:0A:9B:50:CC:C0:78:F4:59:C0:AC:E1:E7:42:3C:CA:78:DC:47:2D:D7:55:D2:04:E7:D5:14:D5:C1:DA:A0:94"}}},"request":{"raw":"GET /fonts/font_14.woff2 HTTP/1.1\r\nHost: cebershoke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cebershoke.com/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:36:13 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18596\r\nlast-modified: Sat, 05 Apr 2025 19:42:03 GMT\r\npriority: u=4,i=?0\r\netag: \"67f1878b-48a4\"\r\nexpires: Fri, 06 Mar 2026 18:36:13 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aLSlEH8j7Cj6r407%2FzocPuRBl1HOOW701iOx1LNQqZduWHhmHgjh4KBNhZLM561CRVPOPsIJqdRM68fxPcogJWwDCxeywqFWiRtvVcRD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b3995ca36eff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18596, version 1.0","md5":"c83e4437a53d7f849f9d32df3d6b68f3","sha1":"fabea5ad92ed3e2431659b02e7624df30d0c6bbc","sha256":"d9bada3a44bb2ffa66dec5cc781cafc9ef17ed876cd9b0c5f7ef18228b63cebb","sha512":"c2ca1630f7229dd2dec37e0722f769dd94fd115eefa8eeba40f9bb09e4fdab7cc7d15f3deea23f50911feae22bae96341a5baca20b59c7982caf7a91a51e152f","ssdeep":"384:h5D5WUhNanar/Z19V6iGCYIqoPfHwfr13GPgqbrxremyFKKWB:h/NaOrBGCYIBPfQD1xqPhl","tlshash":"7482d12a50143642c0f6ff3b6767da72fab83036d8554cd206c9994d89e067df78b839","first_seen":"2024-08-01T01:35:45Z","last_seen":"2026-06-07T19:38:17.221852Z","times_seen":31622,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cebershoke.com/fonts/font_7.woff2","fqdn":"cebershoke.com","domain":"cebershoke.com","tld":"com"},"ip":{"addr":"172.67.175.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cebershoke.com/","date":"2026-03-05T18:36:13.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cebershoke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 20:07:30 GMT","end":"Sat, 25 Apr 2026 21:06:07 GMT"},"fingerprint":{"sha1":"39:2A:E9:CD:F8:42:2E:29:C2:1E:E0:4E:D7:0E:32:EB:FB:6A:E4:84","sha256":"F4:0A:9B:50:CC:C0:78:F4:59:C0:AC:E1:E7:42:3C:CA:78:DC:47:2D:D7:55:D2:04:E7:D5:14:D5:C1:DA:A0:94"}}},"request":{"raw":"GET /fonts/font_7.woff2 HTTP/1.1\r\nHost: cebershoke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cebershoke.com/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:36:13 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18536\r\nlast-modified: Sat, 05 Apr 2025 19:42:03 GMT\r\npriority: u=4,i=?0\r\netag: \"67f1878b-4868\"\r\nexpires: Fri, 06 Mar 2026 18:36:13 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5ztw%2B8L3WpnSX7EofPSJG8aauKxTCNeoDMZ8%2BW7Ew9zRu1NQWRGE%2Bp0gM2K3SFN8xXXXxaLKRYhUSep7rPQIwmgmz0bWXQYn6JOOaJ7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b3995ca39eff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18536,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18536, version 1.0","md5":"8eff0b8045fd1959e117f85654ae7770","sha1":"227fee13ceb7c410b5c0bb8000258b6643cb6255","sha256":"89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571","sha512":"2e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058","ssdeep":"384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc","tlshash":"d882dfa0f21610f7df085c39a41f9d3964274bbc613c7c437379587aaa0068d56bbb79","first_seen":"2024-08-01T01:33:28Z","last_seen":"2026-06-07T22:30:35.381908Z","times_seen":51560,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cebershoke.com/favicon.ico","fqdn":"cebershoke.com","domain":"cebershoke.com","tld":"com"},"ip":{"addr":"172.67.175.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cebershoke.com/","date":"2026-03-05T18:36:13.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cebershoke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 20:07:30 GMT","end":"Sat, 25 Apr 2026 21:06:07 GMT"},"fingerprint":{"sha1":"39:2A:E9:CD:F8:42:2E:29:C2:1E:E0:4E:D7:0E:32:EB:FB:6A:E4:84","sha256":"F4:0A:9B:50:CC:C0:78:F4:59:C0:AC:E1:E7:42:3C:CA:78:DC:47:2D:D7:55:D2:04:E7:D5:14:D5:C1:DA:A0:94"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cebershoke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cebershoke.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:36:13 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9HtTYyshc4BKqQzn7r0Mz3tu4Y4tpoHjvafdqwq%2BAvcwUkJHMfPd6NYv0XxZorlh8UrzRAD%2BHxDvOJaUBq3SZdBc5TnLvYNNwU4vAi9x\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Sat, 05 Apr 2025 19:42:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"86be-6320d327f05e5\"\r\ncf-ray: 9d7b39971a79eff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34494,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"141a8d42e8b005d87402ac81af09d0a3","sha1":"296f1b96773bd7b99ed768d368bda1b2025e680c","sha256":"0da9198cd472157a49358b73f42b2a64912330658379be89da6835998b39de4b","sha512":"470fcd4e5e660fc836dbf8ed399495fba6aceb3498b7e9572f42699d64550648f8a61768663c24f7b60c4a6a3a50175ae7c2821263a8bd542ffcc24bc4e9f913","ssdeep":"192:TQc+0C9dkBIjQ9odLGxgz79qguUEa8CzE989k51MTINlaIHG:TDQ9CIEohGx0qio91fFNEIm","tlshash":"99f2840f1e4a5a01cac213bd5b66d6740ba63eacd57646c8d9fa7c7b3f33ca31a42054","first_seen":"2024-12-11T16:27:40.020997Z","last_seen":"2026-06-05T20:06:23.722758Z","times_seen":220,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cebershoke.com/img/logo.png","fqdn":"cebershoke.com","domain":"cebershoke.com","tld":"com"},"ip":{"addr":"172.67.175.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cebershoke.com/","date":"2026-03-05T18:36:12.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cebershoke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 20:07:30 GMT","end":"Sat, 25 Apr 2026 21:06:07 GMT"},"fingerprint":{"sha1":"39:2A:E9:CD:F8:42:2E:29:C2:1E:E0:4E:D7:0E:32:EB:FB:6A:E4:84","sha256":"F4:0A:9B:50:CC:C0:78:F4:59:C0:AC:E1:E7:42:3C:CA:78:DC:47:2D:D7:55:D2:04:E7:D5:14:D5:C1:DA:A0:94"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: cebershoke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cebershoke.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:36:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 3637\r\nlast-modified: Sat, 05 Apr 2025 19:42:03 GMT\r\npriority: u=4,i=?0\r\netag: \"67f1878b-e35\"\r\nexpires: Fri, 06 Mar 2026 18:36:13 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BnakrcRQTbqYidIiDBMQjVfiSMcZt9bqvTzEFd7FkeOWZ8ITrRDyBaEEnxOEDUajHQ5%2BroalM30h%2F8Yb7%2FHhfT1Ry%2BQbH60EK5VD30YK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b39952a09eff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3637,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 104 x 118, 8-bit/color RGBA, non-interlaced","md5":"01e6d780ad094a9a0794a7a249e2f3fb","sha1":"f7116529e24daaafaf9a50940c84db58630e9bc1","sha256":"df49b5a4ff5c96cc20fd71ec67dc9863f21ba01d52f72699f48f083a822eea6b","sha512":"413c63eef6d5544cfaaac02526133a14e74f06764857a51dd04008176157bc667d9ca15b5f5535809dc762d736d4296b6d692aa292998ab3de3f42842a274ef2","ssdeep":"","tlshash":"eb716dc98dcaee5eed064a4b63b52aa2805312fdda0c86548031ce16c0e1ca7320fbd9","first_seen":"2025-04-16T18:19:17.459141Z","last_seen":"2026-04-03T10:23:39.270665Z","times_seen":125,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cebershoke.com/img/bg.png","fqdn":"cebershoke.com","domain":"cebershoke.com","tld":"com"},"ip":{"addr":"172.67.175.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cebershoke.com/","date":"2026-03-05T18:36:12.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cebershoke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 20:07:30 GMT","end":"Sat, 25 Apr 2026 21:06:07 GMT"},"fingerprint":{"sha1":"39:2A:E9:CD:F8:42:2E:29:C2:1E:E0:4E:D7:0E:32:EB:FB:6A:E4:84","sha256":"F4:0A:9B:50:CC:C0:78:F4:59:C0:AC:E1:E7:42:3C:CA:78:DC:47:2D:D7:55:D2:04:E7:D5:14:D5:C1:DA:A0:94"}}},"request":{"raw":"GET /img/bg.png HTTP/1.1\r\nHost: cebershoke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cebershoke.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:36:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 5862676\r\nlast-modified: Sat, 05 Apr 2025 19:42:03 GMT\r\npriority: u=4,i=?0\r\netag: \"67f1878b-597514\"\r\nexpires: Fri, 06 Mar 2026 18:36:13 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ifbpLhkViMGx42UYsgsMD3FPI5SyGf9XgatsRZKQPUzpwUF2ofPrvCh6%2BjT7ef0UwdD4Zwr9%2BKjAwqse4fe46qj93V%2BNVWLfigxyayoj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b39952a0aeff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5862676,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 1550, 8-bit/color RGBA, non-interlaced","md5":"8f91f869fcb39e27be95dcc35ddb6633","sha1":"6b6f2c8401ba48ca7c299166d5fc94b885ed88e8","sha256":"534ca285ecd007a6ddb3ebeb455fe35fc927ae6a5465f65ef8b357db97b58055","sha512":"5f414f0b50de24aea3a916dab5fb58214cb71450072f901f81c9f11edffa3eda2a7ca012f5dfc880128393e4a123ea6549093b33c12179e17a4501294814be1b","ssdeep":"24576:EnetFYG15CxwQpBK4dzXVVW9FuUJXpUlV8MOcgh3wfze:EnKWa4wmMWm9FuU/Milteze","tlshash":"a2253356c0541e386023faa52ec54cdea7f08a72ba6306f4e4ed6307b70293d577c99e","first_seen":"2026-01-10T11:30:28.204538Z","last_seen":"2026-03-27T15:31:46.523246Z","times_seen":6,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":388,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cebershoke.com/img/1.png","fqdn":"cebershoke.com","domain":"cebershoke.com","tld":"com"},"ip":{"addr":"172.67.175.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cebershoke.com/","date":"2026-03-05T18:36:12.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cebershoke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 20:07:30 GMT","end":"Sat, 25 Apr 2026 21:06:07 GMT"},"fingerprint":{"sha1":"39:2A:E9:CD:F8:42:2E:29:C2:1E:E0:4E:D7:0E:32:EB:FB:6A:E4:84","sha256":"F4:0A:9B:50:CC:C0:78:F4:59:C0:AC:E1:E7:42:3C:CA:78:DC:47:2D:D7:55:D2:04:E7:D5:14:D5:C1:DA:A0:94"}}},"request":{"raw":"GET /img/1.png HTTP/1.1\r\nHost: cebershoke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cebershoke.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:36:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 106149\r\nlast-modified: Sat, 05 Apr 2025 19:42:03 GMT\r\npriority: u=4,i=?0\r\netag: \"67f1878b-19ea5\"\r\nexpires: Fri, 06 Mar 2026 18:36:13 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fIcXMTQJficqVU8mDyY%2FiufDm8uPAOA6B%2BCIk6D9THQfO1pvElOwiW8HmJB3KQ3kZ7ryfbY4VdHxK0PvEkGZ0B9D%2BE%2BixknSRE%2B2hB5J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b39953a0eeff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106149,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 228, 8-bit/color RGBA, non-interlaced","md5":"7d36d59cd099c836aa673d347ce121c3","sha1":"5a2723bc0d5cbed7425fb625b967b00d0b245931","sha256":"a276275f3c938ca9fdfd225499c01a5bf40a2efde5feb46721e7fb6412629e29","sha512":"620731e612fcef3d6f3c8e63b914aac89791b531056e8e4434054b47459ec89038bd477f840ba0ff02c47591c747745d5d3c7380b6b19c8fefaaefe16f14764c","ssdeep":"1536:0AiwWc73T1DO1EJd0Uc94VkD+2uRhspsZHO2EUYz+QncEpgCzvj0ROTckkx3x0O:Riwp7tOUdCckbuRap2uaQlt0Zx3xz","tlshash":"80a3127f06bdde6c3394987fd6fb8c021438ba3305504552197410c7ab926ee9b2d2ab","first_seen":"2026-01-10T11:30:28.198641Z","last_seen":"2026-03-27T15:31:46.517232Z","times_seen":6,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cebershoke.com/img/4.png","fqdn":"cebershoke.com","domain":"cebershoke.com","tld":"com"},"ip":{"addr":"172.67.175.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cebershoke.com/","date":"2026-03-05T18:36:12.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cebershoke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 20:07:30 GMT","end":"Sat, 25 Apr 2026 21:06:07 GMT"},"fingerprint":{"sha1":"39:2A:E9:CD:F8:42:2E:29:C2:1E:E0:4E:D7:0E:32:EB:FB:6A:E4:84","sha256":"F4:0A:9B:50:CC:C0:78:F4:59:C0:AC:E1:E7:42:3C:CA:78:DC:47:2D:D7:55:D2:04:E7:D5:14:D5:C1:DA:A0:94"}}},"request":{"raw":"GET /img/4.png HTTP/1.1\r\nHost: cebershoke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cebershoke.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:36:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 28063\r\nlast-modified: Sat, 05 Apr 2025 19:42:03 GMT\r\npriority: u=4,i=?0\r\netag: \"67f1878b-6d9f\"\r\nexpires: Fri, 06 Mar 2026 18:36:13 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tS%2BWOyLzVp5t1GM8kHX3B21WfYJgxa%2FfwHPPIBxSON9hzXv9E7ALlPGX5kIE9JBwZCXVV9OC2F77Il8oD7rsso%2FMPFYLIgt4i1%2F4xwLO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b39953a10eff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28063,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 238, 8-bit/color RGBA, non-interlaced","md5":"3132b0eded850db4b3cd10a5f2bece65","sha1":"10b567173cb9786a10451d7e35d396f61710bf00","sha256":"9acd358ce5a986d95ca6870c7c7bf9d79f56f9067708f1312a79a73d920d0b1e","sha512":"4c69ec9b681a06f6bbfab6348b36e7a1fc09daeb482687679f242f5e715a419806634728203bd13c6ebb1ed874aaf07a226c4949b84449cf23b3bfb2ae30cb92","ssdeep":"768:SNb1UvXtGFAcW9NJbHYzUtyno8as1lLTBXzm2/H3:SkvXA3MrYqllGlLTMM","tlshash":"b4c2e1e4db18c4922302cb22442e5ba9256b136a07593bdc78f4fd475026fa7ee5e0b6","first_seen":"2026-01-10T11:30:28.200881Z","last_seen":"2026-03-27T15:31:46.519104Z","times_seen":6,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cebershoke.com/img/2.png","fqdn":"cebershoke.com","domain":"cebershoke.com","tld":"com"},"ip":{"addr":"172.67.175.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cebershoke.com/","date":"2026-03-05T18:36:12.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cebershoke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 20:07:30 GMT","end":"Sat, 25 Apr 2026 21:06:07 GMT"},"fingerprint":{"sha1":"39:2A:E9:CD:F8:42:2E:29:C2:1E:E0:4E:D7:0E:32:EB:FB:6A:E4:84","sha256":"F4:0A:9B:50:CC:C0:78:F4:59:C0:AC:E1:E7:42:3C:CA:78:DC:47:2D:D7:55:D2:04:E7:D5:14:D5:C1:DA:A0:94"}}},"request":{"raw":"GET /img/2.png HTTP/1.1\r\nHost: cebershoke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cebershoke.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:36:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 37363\r\nlast-modified: Sat, 05 Apr 2025 19:42:03 GMT\r\npriority: u=4,i=?0\r\netag: \"67f1878b-91f3\"\r\nexpires: Fri, 06 Mar 2026 18:36:13 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JlYedxhZGp4cGEpOlfv%2BlyNCrsp%2Fnjr%2BU2qfwQMf0Wz%2BvXJUO37sb3d1Q5vjTBKIN2R5VpRAcbs9F7dvG6SP6y2uJfK%2FAtAdXLPzm0Nm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b39953a0feff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37363,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 225, 8-bit/color RGBA, non-interlaced","md5":"ba6d3be49209f693f73b4e66ae02827a","sha1":"1f8c4b1738320200db57c3fb04959cf464db55e3","sha256":"182ced0175a87462e1f6b4b91254abd0a53ec9581cfd5c7812d4c7f69e5f89fc","sha512":"5f9b0b4c6387218f8e93e841a031ae30cce9f79cc6a9ce3c7712ba488d866dc8c42b8e26f8ea14f951e32a457f9cd5e8f4939171882471fd040ba68a25d6fa9d","ssdeep":"768:vFgExQkTccC+0/nj0CbC989FlgY3PAYQTqYP6c:9lxlTcT+ejsUlgmYYQTlPH","tlshash":"dcf2f217a2c752a6e8be4d2a76877bcb18d4fae51e2f40d1bc14431e4c9cdd92e3590c","first_seen":"2026-01-10T11:30:28.199822Z","last_seen":"2026-03-27T15:31:46.518297Z","times_seen":6,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cebershoke.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}