{"report_id":"a1823824-679d-4305-bea2-0520348f347f","version":0,"status":"done","tags":[],"date":"2026-08-13T19:37:23Z","url":{"schema":"https","addr":"ddosnow.com/login","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ddosnow.com/login","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"title":"Stresser.su - Login","dom":{"size":17199,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (14942), with CRLF line terminators","md5":"21444d3b194b976eeeebc0851d4856f1","sha1":"dc5c5490fcc28ab12ee6ab49e299f142be2bc5d2","sha256":"d59b6522e7c93e4d38f8766f95502e42be148a11df00b46ec7d89a75db1c6ffd","sha512":"c57c64deb1fe73b3d3b6604e975c73f359f280a05c147177811e57d2ec3559c658cb528e2a7c36f02c5872dfda7043a3e7295c6872c311a1ae47326e8a1767ee","ssdeep":"384:FRFPqu9vIQS5iI9MUSGMUj57T83+BIKDZVM23x8Onx/X:FRFPqu9gQS5i2MbGMI3CV23OEx/X","tlshash":"7c729e32e9144c3b4667a9c5b55ae344aea3820fc8652840b3ec92ee4fd9fe4c477635","dom_hash":"domhash21896ae481a7cc5707a97e146ffc8865","first_seen":"2026-08-13T19:37:30.388977Z","last_seen":"2026-08-13T19:37:30.388977Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ddosnow.com/login","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-17T19:37:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ddosnow.com","ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-08-24","domain_rank":0,"first_seen":"2026-08-13T19:37:25.681146Z","last_seen":"2026-08-13T19:37:25.681146Z","alert_count":19,"request_count":19,"received_data":1176222,"sent_data":12313,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-09T22:33:32.164957Z","alert_count":0,"request_count":1,"received_data":442914,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ddosnow.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47a84f46424ab4645bfa188bad9360f0","sha1":"d66de1a7464269bd4a212e4d4f9e9b8b52b6f436","sha256":"2604b6b70264dff2843765d9078d2f617b58084f3d75d4ed141eea8bf67b7544","sha512":"506d1bb3e5d3f2b22356740336ccb6dc4bb3d0c622f4634326ec0ce77afd9ec2fb4bee82e64ad9ed4cdf55b4db7071975d73c0d608db9971804b1fdbf3b9596e","ssdeep":"384:AXSk8Z4Ren/hzHricmQjZ2VQ8NTMDhScKA+Tx5g0bEIrXydfX:AXJ8Z4w/hzriOj4PRMNATxLEhX","tlshash":"5f9285d979d1b44c524b1831361b72cfb66ebc8c2118b688d1209ad07b7d7a8d93eb8c","size":19825,"data":"","first_seen":"2026-08-13T19:37:30.392644Z","last_seen":"2026-08-13T19:37:30.392644Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/static/js/253.80867a45.chunk.js","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"642408a8c273cfe578e4f34cb9942738","sha1":"6bfdd7198e7b10227793a2819d778462c4c785b0","sha256":"7b55058918d0331c57da41eb4d02532004bad5eb0f81d7b2230fb152394ad660","sha512":"063043ac3bba2417c44b76de7fa91e7c3932047f81b959b9ba4ea7c13019b6d552d8096c7702864f10594d20326bebbf4aef158ed3d469961db55ec107c038f4","ssdeep":"768:+fryKkg3yRbt/rTtKJbDcSVNab6CcRMAPFvMm8OnS9kP7p1dIHgl9IfGaS+4xZMg:+fvzE9tHitka9Bjl+U9h","tlshash":"4ad2e884708374b556e308d8c03b420eb23e6a5a764ec550f6bdeced15b258a7532faa","size":28904,"data":"","first_seen":"2026-05-03T18:30:13.890747Z","last_seen":"2026-08-13T19:37:30.397073Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-SSGSR26KRK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccde1b3fa2d21b5aef9fb05a6dbf0bf1","sha1":"0fca0b9e298fdc2fe5808e8543ab4dfde638a63c","sha256":"938d10f47e39880a921aefa35fe0ecdaf6cf5a1908eb2b1b8b1ce88bb502cd6b","sha512":"272e5bea75cb0247d0843f85d389546000afc96f80355b3440420f73d323ef138ddbf4fa27da9f6f24c819530af0943d584b42fa352fec39d95d3e46eb4c740a","ssdeep":"6144:4MhbBD/1ESJaC0XX3iRxnOF7hcgLsegErl3POiwTyMADGsUDvwN:9hdnaxXX+xOCTsDGsaS","tlshash":"ba9408cdb3d674669392f078503f018ba67a79a2f44cc899f189c8d42e7469a4237f7c","size":442310,"data":"","first_seen":"2026-08-13T19:37:30.406164Z","last_seen":"2026-08-13T19:37:30.406164Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/static/js/main.6d88ea2f.js","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8eb0762b300f5b7e9f34d475cde8943","sha1":"a43e5a13432a8345bb2705310315233b00383ceb","sha256":"0019571714cc80286110632c0b2677f3334641317a347a1cbaf32d2c46951a79","sha512":"0feeb656269e6e1e4761ce5f8b4fe059f755ec297cd432fc6fea0066360edbe0e0dea54bf68312b03054fe2bef45b6057de19bbdc482c43fa63a84ec70244fe3","ssdeep":"12288:F4ABZ/BWwrC4ICx/UfKnHyIk1ZWFDbOQ+:F4A0wrClCpIMSIk1ZWFDl+","tlshash":"07c45cc53291f0a157e741e6407f0606b33a1d1a380dc464b629fcda78b499ea2bbf7d","size":566630,"data":"","first_seen":"2026-08-13T19:37:30.405275Z","last_seen":"2026-08-13T19:37:30.405275Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b71f8f37a0e6c013faf05a92177a72ad","sha1":"e2861d6275bff8c6b8659eab0120692260f943bd","sha256":"2a6d6da8bade26bb779183c1ec4bc830e262b062bbab8b9f42960de54e4e59cf","sha512":"4275a9d02fc60706f0891e9b21f5df467a0d406e4a79e9ae0ab9f29997df52f11f4fa111c5e382cb14d24778c73d5a9c4fbd72ed5c39ebfade48187baaf15d57","ssdeep":"","tlshash":"10d023a5187685316594019e1075f3a4257131547751b280c2ddcc2f9e10dd304b1d5c","size":217,"data":"","first_seen":"2026-08-13T19:37:30.412027Z","last_seen":"2026-08-13T19:37:30.412027Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/static/js/406.8b0fd2dd.chunk.js","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2aeeca5a610664d73c6e65697afe7790","sha1":"cd368f403aa3325a7bbafc3a7668b9985bf831db","sha256":"7299bcdcc036c5fc2afc9bc9b64f7c6fe99c6610a37140a45a7593bb6604afde","sha512":"fe7696b3f8adef140d9e71a5a13b92bb5539fcdc49fbe152c8fa30fbebd114482fa186d3571acf38e5beab2ee5f02d18832240d5ebc14cc04e73bc98c417e292","ssdeep":"3072:VfW0V7rcEeSdcHw+lXoyGYMQm4+GB/nIuQrHhGcE6WB/EFpaLp:VfWoVdcHwqXoyix4+GB/ncBpi/EFpaLp","tlshash":"9024e784ba92f0b557a364a0803f8507f27b6f68b00ed0d4e2a6d5d56c7898e9173f3d","size":209997,"data":"","first_seen":"2026-05-03T18:30:13.861221Z","last_seen":"2026-08-13T19:37:30.407178Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/static/js/620.19317e4d.chunk.js","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b06353c76a9265c37629afe260919bf","sha1":"bf4cf903911f13b88128d266381950c1fb3bfe09","sha256":"011c09a3e79e89b0e4693717a3e3352ef367993a8b7b3294a85486f1a111d59b","sha512":"4208a8817a8d0cded3aeb8a230a5a34b33cbc3166e16638578040419e6c24c1640570e641f513dd81348e748a659303c4bc0f2d23312e2fabd8f65055dfd69b2","ssdeep":"384:HfQDdcZ2wKsPVYC8wwHRvwI3m0mLYxUYQg9vIQS5iI9MUSGMUj57T83+BIKDZVMW:HfQhcZJBP1wxosm0mLYxUYQg9gQS5i2Z","tlshash":"1e924c0df595aee9b96508c4ff5fc40cb91f29848d4d4860bafcf856089d1e8b207bda","size":20010,"data":"","first_seen":"2026-08-13T19:37:30.399505Z","last_seen":"2026-08-13T19:37:30.399505Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/static/js/720.87a46002.chunk.js","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"defa9d6d3a9a914c30480b91bca4e58c","sha1":"adf1d150c7bcb7bb129b967915c26809f1fb9f0b","sha256":"cd49f11cbf298b15bad6da43d63f4f5320418861caa6b00fcb0a8211115bad4d","sha512":"a1d8ad9119181e4338be25996f2c70fda4337a23a861fb9c003321cb116b5eeba6722e6552ebf45c2ff8863336afdc0d95637b546d1481b84eded0a30b36a8ad","ssdeep":"192:HfUaYxuQykZH0Uh9teC1Es6GcCBh7JIa6/Hw:HfrYTH067RP6GdBlJIaOHw","tlshash":"8ae10f51e4a6bbccab7645c484af900d301f7a6cca09c8f4aab97c641e4c5d53707fd9","size":7104,"data":"","first_seen":"2026-05-03T18:30:13.865889Z","last_seen":"2026-08-13T19:37:30.391474Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/static/js/75.87834cae.chunk.js","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c9981d92ffe9108865384360f6adafb","sha1":"e2cc582ec3839761df2daeff9897892be672f456","sha256":"9313052826ef360104639ecb2befcee65afdeb61d41a87d964aa3e1cd04ccd4d","sha512":"bdb9c38701db535c3eef73f3cc827701dce3496942a878493b3b3c3d89ed8819590a53fb6c6560abbd552e52dfaa4e2e968e10b4458bb0ab2b6fd874ac3466a6","ssdeep":"384:Sfh6xDw4oG5oOS3BiIHjHHHsglu00UqpAAdTRbgT4NaSvh4n+Dy5InNF14C6rYsv:SfW7nIPmUq4Y4nfa4Cj3asaw0x","tlshash":"f6e21ad5f2a1a1f1165628d4642f140af57a7825bc0da0e8fb71c0e2ecb8bc69477f78","size":32338,"data":"","first_seen":"2026-05-03T18:30:13.911119Z","last_seen":"2026-08-13T19:37:30.39818Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ddosnow.com/login","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-13T19:36:53.941Z","timestamp":1786649813941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 13 Aug 2026 19:36:54 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Sun, 12 Jul 2026 02:22:16 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nTDL0RaM4a%2BWm5l1V95MJGtuCv2RoGNM%2FNH4nB3Tbez5KcAAytCzjsd2JVOx1AiLrUPRT6BIOGi8nEuBQEkFUDgAn1ldMR1m7HsY1CM7TkF2q0I415X6nyu5asiQjQ%3D%3D\"}]}\r\nonion-location: http://mbxbw4lalgzhb2c24isv5tei5clkhgxj6umatlwqha3rqbrx5s3hehqd.onion/login\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a2aa2bd95ed4569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3223,"size_decoded":2304,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3223), with no line terminators","md5":"3e8d5b25440d6a1fbd4a9e2debf57b64","sha1":"d62aa88836babb2cdd241157b7022bba1d4965f5","sha256":"69e2eb771423dc4997e708af35f0ed9d59bcb7a5a869166772ac092e960a7af6","sha512":"d015d7496973583d13db82b743a3788ddb00af2e3248a54529bbfad40bd66a6d1c767832e88c4ede0d6ff3fa0ff8363540b8bd8e8d2eb97e749d2196d5882719","ssdeep":"","tlshash":"87613163e5244829227092b6f966f158d737a214e194ec44f38d54af0ee1fd388f7e25","first_seen":"2026-08-13T19:37:30.390312Z","last_seen":"2026-08-13T19:37:30.390312Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":8,"connect":2,"send":0,"wait":140,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/static/js/720.87a46002.chunk.js","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:54.816Z","timestamp":1786649814816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"GET /static/js/720.87a46002.chunk.js HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ddosnow.com/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:36:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 12 Jul 2026 02:22:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a52fa58-1bc0\"\r\nonion-location: http://mbxbw4lalgzhb2c24isv5tei5clkhgxj6umatlwqha3rqbrx5s3hehqd.onion/static/js/720.87a46002.chunk.js\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4NeBhN%2BPXz0SxBWSIgAAkiuj5nyduu9bc17vXFAeEbaWAy1XbTpiqd8iTNwwu5E6q6D4lcuwaqaFq4kd05CCBrLqpFAFK%2FtfSKpsOpWYvhSRuX%2FZK%2B0V%2FSXHGi3O9g%3D%3D\"}]}\r\ncf-ray: a2aa2bde9eb60b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7104,"size_decoded":3606,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7104), with no line terminators","md5":"defa9d6d3a9a914c30480b91bca4e58c","sha1":"adf1d150c7bcb7bb129b967915c26809f1fb9f0b","sha256":"cd49f11cbf298b15bad6da43d63f4f5320418861caa6b00fcb0a8211115bad4d","sha512":"a1d8ad9119181e4338be25996f2c70fda4337a23a861fb9c003321cb116b5eeba6722e6552ebf45c2ff8863336afdc0d95637b546d1481b84eded0a30b36a8ad","ssdeep":"192:HfUaYxuQykZH0Uh9teC1Es6GcCBh7JIa6/Hw:HfrYTH067RP6GdBlJIaOHw","tlshash":"8ae10f51e4a6bbccab7645c484af900d301f7a6cca09c8f4aab97c641e4c5d53707fd9","first_seen":"2026-05-03T18:30:13.865889Z","last_seen":"2026-08-13T19:37:30.391474Z","times_seen":2,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/aae2b9a1c261/main.js?","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:54.828Z","timestamp":1786649814828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/aae2b9a1c261/main.js? HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Thu, 13 Aug 2026 19:36:54 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a2aa2bdeaeba0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19825,"size_decoded":9760,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19825), with no line terminators","md5":"47a84f46424ab4645bfa188bad9360f0","sha1":"d66de1a7464269bd4a212e4d4f9e9b8b52b6f436","sha256":"2604b6b70264dff2843765d9078d2f617b58084f3d75d4ed141eea8bf67b7544","sha512":"506d1bb3e5d3f2b22356740336ccb6dc4bb3d0c622f4634326ec0ce77afd9ec2fb4bee82e64ad9ed4cdf55b4db7071975d73c0d608db9971804b1fdbf3b9596e","ssdeep":"384:AXSk8Z4Ren/hzHricmQjZ2VQ8NTMDhScKA+Tx5g0bEIrXydfX:AXJ8Z4w/hzriOj4PRMNATxLEhX","tlshash":"5f9285d979d1b44c524b1831361b72cfb66ebc8c2118b688d1209ad07b7d7a8d93eb8c","first_seen":"2026-08-13T19:37:30.392644Z","last_seen":"2026-08-13T19:37:30.392644Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/locales/en/header.json","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:54.823Z","timestamp":1786649814823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"GET /locales/en/header.json HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ddosnow.com/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: language=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:36:54 GMT\r\ncontent-type: application/json\r\nlast-modified: Sun, 12 Jul 2026 02:22:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a52fa4e-808\"\r\nonion-location: http://mbxbw4lalgzhb2c24isv5tei5clkhgxj6umatlwqha3rqbrx5s3hehqd.onion/locales/en/header.json\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bexPoR67sbGtu7lMFv5L%2FtNxvRuEjgjzpJ7i3ubSKVIeLS2W1FoMGb8chO0fSygfRIlIUuDj3ust47ru%2Fls91IjtPvb9MSfLG1z5Wp48CSOeDgQ2xtMtfvskVIesjQ%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2aa2bde9eb90b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2056,"size_decoded":1875,"mime_type":"application/json","magic":"JSON text data","md5":"1bfc9ed8253c2222de96dfa7663e6ede","sha1":"5479c91c6f2245db73a8100d31f7d910c7875cc8","sha256":"56f9bdf70a6cae82f506fddf13505488d2b0e3545c0c63c8498f190a4d167f2a","sha512":"b983aa23424368e658f328dd85e0c3385fcd7ad8d29a70f1add1a38141ae62282c0b18fc9c0c8561e67aecfc011fc8f96f738d0163e64cf17bea19618989bf23","ssdeep":"","tlshash":"af419b19dbb04ca711aa5553b43a2493f420d18b1b183d29b78c851c0f4e8ff65fe2ea","first_seen":"2026-05-03T18:30:13.896524Z","last_seen":"2026-08-13T19:37:30.393731Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/img/16.png","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:54.981Z","timestamp":1786649814981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"GET /img/16.png HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ddosnow.com/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: language=en; SESSION=jd72tsh1te98jdgciank6ll0d8; XSRF-TOKEN=d9ccf2d30616065130a6e70ad1792ec700bbf1ee; cf_clearance=mvnZIB0meENm79dKai1Qi4V79Sk7Ihc06j4Ztqf.j90-1786649814-1.2.1.1-nHNKGAm7WrRA60A.xkd.IEgZe2NFWpmqSjFuXUwtkWeCDHSRTcS.bqZS_iHCo1rDSTXEiGhveRqfC9ExCRCGyYBt1QEZUqyUHbHaYJaROXC6KeVRWUYemgtbqKrmUKb1p9HkGgLYRIRye8sQ9c6w94MNbWpT_q030Uy5Xb570_PIXIs4669QuHoB.D5wz0MkdmjwaLBitDEJxnKfi7Yv6OgsTt4YcJXkvvIMZ6uczL_aUOlFbNEhkAO2SM7Nw0YnmVrTrTmOsR3NtbGcOMqZfJgH4wef5TAL2SIB3m1mStz4C_vTRVe6NLAbh7227BISqpMKCKsEFnTXcG9oy5ohLrOHD72cQh3OveujpDvxb0E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:36:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 02:22:06 GMT\r\netag: \"6a52fa4e-a7a\"\r\nonion-location: http://mbxbw4lalgzhb2c24isv5tei5clkhgxj6umatlwqha3rqbrx5s3hehqd.onion/img/16.png\r\naccept-ranges: bytes\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fZepZvRgXxcVrAgQ3gsAUaR%2B5Tx%2Fe%2B6goc85Mu8NzGUXTUgA6xTCl64uplpiCHF7mO8SKmuRn5B%2B5ic5mmK3LygTRzUpK44M9PLHuIxMOlPUoGfUsACE9yILoKbVFg%3D%3D\"}]}\r\ncf-ray: a2aa2bdf9ec10b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2682,"size_decoded":3717,"mime_type":"image/png","magic":"PNG image data, 16 x 15, 8-bit colormap, non-interlaced","md5":"306823eedc07aba1e926288bda6dd920","sha1":"a9dd943a8f0ca030a5eee899cd4d5a65549ab818","sha256":"407daeddb86e3059e8e7a857d83186849e6f5e6c3b28a81067e22ffcd8adf494","sha512":"cb31e957ba1a17e766d055fe17eea21f2577adf79d9ea7efa603932b54c1a04f4b8b3751f0396547add854f875b8d014d0c7445066cb78001e65a241b9e03f30","ssdeep":"","tlshash":"d551e7fcb800d810808fb6277a6ed1d09fb28fcb1a1a84e75264b165c6747c8c4ec48f","first_seen":"2024-12-26T15:48:34.014995Z","last_seen":"2026-08-13T19:37:30.395166Z","times_seen":6,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/static/css/main.ea2ba633.css","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:54.288Z","timestamp":1786649814288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"GET /static/css/main.ea2ba633.css HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ddosnow.com/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:36:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 12 Jul 2026 02:22:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a52fa58-271fa\"\r\nonion-location: http://mbxbw4lalgzhb2c24isv5tei5clkhgxj6umatlwqha3rqbrx5s3hehqd.onion/static/css/main.ea2ba633.css\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S1J7imBS5MU415%2FvwgKtS0buqHRNZIC1PC5AZhxWEocBfA9rKHWtZFdfVzNhCu41XPojjxwW%2BO1dJXdSAPWvDSo8RbJWcPDVVYf5Fo4iNkYRJqJN5U%2B5i%2B7N9F3nIA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a2aa2bdb4e970b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160250,"size_decoded":34073,"mime_type":"text/css","magic":"ASCII text, with very long lines (58030)","md5":"123e5b7cda99e07311cec9bf4eb4a277","sha1":"e762faf1c5bfb7fe7e201ee3e0fe636267f3b374","sha256":"a361b41005820ceb46fe6a5d868c485f1909c35f72b24bcd166c933b98479350","sha512":"6501c30223023734618873211bb70b8bdb1f487c8c52abfd3c7e69b79b4818dfaf516819b766b3831d755c498cc3feb41c72fba9c7c72b0d6f0f0455fa487671","ssdeep":"3072:HtPd4/IOBBAdB+26NM28ErYnsr53NWxFW1REv:HtPKDBAT6NM28ErYnsr53NWxFW1REv","tlshash":"2ff32cf1e44810d87732c40bbf81bbbc60b9f268d5960ea9f41f6a2c5ac539506d2f6d","first_seen":"2026-05-03T18:30:13.908971Z","last_seen":"2026-08-13T19:37:30.395721Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/static/js/253.80867a45.chunk.js","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:54.807Z","timestamp":1786649814807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"GET /static/js/253.80867a45.chunk.js HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ddosnow.com/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:36:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 12 Jul 2026 02:22:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a52fa58-70e8\"\r\nonion-location: http://mbxbw4lalgzhb2c24isv5tei5clkhgxj6umatlwqha3rqbrx5s3hehqd.onion/static/js/253.80867a45.chunk.js\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pwaJ%2BfJAflif42dcXXnX6ohTNFdIs48YEbbSPBJHO9SwDk5g1hUgrdrA9U0tlk4Sz2%2FlUDpLVuZWCk95YHmc443FRt9YgKcZGqI2tBe4AzIsiIcHny2VN1wSDhkd1g%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2aa2bde8eaf0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28904,"size_decoded":10810,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28828)","md5":"642408a8c273cfe578e4f34cb9942738","sha1":"6bfdd7198e7b10227793a2819d778462c4c785b0","sha256":"7b55058918d0331c57da41eb4d02532004bad5eb0f81d7b2230fb152394ad660","sha512":"063043ac3bba2417c44b76de7fa91e7c3932047f81b959b9ba4ea7c13019b6d552d8096c7702864f10594d20326bebbf4aef158ed3d469961db55ec107c038f4","ssdeep":"768:+fryKkg3yRbt/rTtKJbDcSVNab6CcRMAPFvMm8OnS9kP7p1dIHgl9IfGaS+4xZMg:+fvzE9tHitka9Bjl+U9h","tlshash":"4ad2e884708374b556e308d8c03b420eb23e6a5a764ec550f6bdeced15b258a7532faa","first_seen":"2026-05-03T18:30:13.890747Z","last_seen":"2026-08-13T19:37:30.397073Z","times_seen":2,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/static/js/75.87834cae.chunk.js","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:54.809Z","timestamp":1786649814809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"GET /static/js/75.87834cae.chunk.js HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ddosnow.com/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:36:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 12 Jul 2026 02:22:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a52fa58-7e52\"\r\nonion-location: http://mbxbw4lalgzhb2c24isv5tei5clkhgxj6umatlwqha3rqbrx5s3hehqd.onion/static/js/75.87834cae.chunk.js\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5UW3PKg7H%2Bi0uj2cUz4BJmbGXwbj%2F6tsG9XLajlFQ9iaFrYmoALkD%2BnLwLtywZSzbAfPko2VSRATzS5P3CLQdXaICv5wzPCq1hg6W%2FseQdQ1xVB%2F5B6zHWEYKF79fQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2aa2bde8eb00b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32338,"size_decoded":11935,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32263)","md5":"2c9981d92ffe9108865384360f6adafb","sha1":"e2cc582ec3839761df2daeff9897892be672f456","sha256":"9313052826ef360104639ecb2befcee65afdeb61d41a87d964aa3e1cd04ccd4d","sha512":"bdb9c38701db535c3eef73f3cc827701dce3496942a878493b3b3c3d89ed8819590a53fb6c6560abbd552e52dfaa4e2e968e10b4458bb0ab2b6fd874ac3466a6","ssdeep":"384:Sfh6xDw4oG5oOS3BiIHjHHHsglu00UqpAAdTRbgT4NaSvh4n+Dy5InNF14C6rYsv:SfW7nIPmUq4Y4nfa4Cj3asaw0x","tlshash":"f6e21ad5f2a1a1f1165628d4642f140af57a7825bc0da0e8fb71c0e2ecb8bc69477f78","first_seen":"2026-05-03T18:30:13.911119Z","last_seen":"2026-08-13T19:37:30.39818Z","times_seen":2,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/static/js/620.19317e4d.chunk.js","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:54.812Z","timestamp":1786649814812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"GET /static/js/620.19317e4d.chunk.js HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ddosnow.com/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:36:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 12 Jul 2026 02:22:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a52fa58-4e2a\"\r\nonion-location: http://mbxbw4lalgzhb2c24isv5tei5clkhgxj6umatlwqha3rqbrx5s3hehqd.onion/static/js/620.19317e4d.chunk.js\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wSEiLIUB2W9y2f%2FucuxHCONMqqRiQ1X%2Fn2UeCe6ao6dFFHohNUSmlxjSz%2BynTBP9IblDnuUrK0tyjTYihzwhnA1Z6ILvKKqwT6FzexED9Mt0KGuVcu9f6G4iYbCzQw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2aa2bde8eb30b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20010,"size_decoded":13703,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20010), with no line terminators","md5":"0b06353c76a9265c37629afe260919bf","sha1":"bf4cf903911f13b88128d266381950c1fb3bfe09","sha256":"011c09a3e79e89b0e4693717a3e3352ef367993a8b7b3294a85486f1a111d59b","sha512":"4208a8817a8d0cded3aeb8a230a5a34b33cbc3166e16638578040419e6c24c1640570e641f513dd81348e748a659303c4bc0f2d23312e2fabd8f65055dfd69b2","ssdeep":"384:HfQDdcZ2wKsPVYC8wwHRvwI3m0mLYxUYQg9vIQS5iI9MUSGMUj57T83+BIKDZVMW:HfQhcZJBP1wxosm0mLYxUYQg9gQS5i2Z","tlshash":"1e924c0df595aee9b96508c4ff5fc40cb91f29848d4d4860bafcf856089d1e8b207bda","first_seen":"2026-08-13T19:37:30.399505Z","last_seen":"2026-08-13T19:37:30.399505Z","times_seen":1,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/static/css/720.fa4adbbc.chunk.css","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:54.814Z","timestamp":1786649814814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"GET /static/css/720.fa4adbbc.chunk.css HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ddosnow.com/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:36:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 12 Jul 2026 02:22:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a52fa58-95b\"\r\nonion-location: http://mbxbw4lalgzhb2c24isv5tei5clkhgxj6umatlwqha3rqbrx5s3hehqd.onion/static/css/720.fa4adbbc.chunk.css\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PILpOj19%2BGUAmWN6nxfFBLRo9pzSPWCbc0AeGDD1ZN9aj9lkCB1EqUW3FGtk3CLHvbWSb%2BuOfBs6r1gPVyeWLKofND4RI38pMKxvCWRJp1iE80X8Si1GE%2BBSbiGo6A%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a2aa2bde9eb40b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2395,"size_decoded":1823,"mime_type":"text/css","magic":"ASCII text, with very long lines (2395), with no line terminators","md5":"c2a13a2a4e73cc695085a333c1d2b657","sha1":"d0af6033d2386ba7834f5020ea0cb7ad25406756","sha256":"b26bbcd7349664a59ec7e0a095e909b9b3d37b5bf492965729139bfadd2baa61","sha512":"6f3ad9a4b569c4c277e761f31491f59f42fe4e6f8991f2ce446399a21151d5b970317ca31b421b4a06fb81e273fe361b2105f80455399489fa9f668b5211984b","ssdeep":"","tlshash":"d7416e05d6e0143b656b55fce298f508de6d71c4ce605becf62a64a40ec6abd30e231d","first_seen":"2026-05-03T18:30:13.879814Z","last_seen":"2026-08-13T19:37:30.400693Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/request/view/getCSRFToken","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:54.819Z","timestamp":1786649814819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"GET /request/view/getCSRFToken HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ddosnow.com/login\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nExpires: 0\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: language=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:36:54 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nset-cookie: SESSION=jd72tsh1te98jdgciank6ll0d8; path=/; secure; HttpOnly\nXSRF-TOKEN=d9ccf2d30616065130a6e70ad1792ec700bbf1ee; path=/; expires=Thu, 20 Aug 2026 19:36:54 GMT; secure; SameSite=strict\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nonion-location: http://mbxbw4lalgzhb2c24isv5tei5clkhgxj6umatlwqha3rqbrx5s3hehqd.onion/request/view/getCSRFToken\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SmK%2F73XnjQuGR9B8RZ31v3zmR5TCvvCGhAKgB6XwZ0SOLv3nmrStqYJ7fFjl1rq%2FQsMjayeOrp8bBiY546nyXFbDsOHdPEeerkL5tNoxi095gtrSMS0sUUYN2ZmEGQ%3D%3D\"}]}\r\ncf-ray: a2aa2bde9eb80b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32,"size_decoded":1321,"mime_type":"application/json","magic":"JSON text data","md5":"26c5f515b7b771cd811be4591eb99ee9","sha1":"c16f4dd9aa68ade069c6f4abd83cba2f1e19de49","sha256":"2229b31bad79909761f552cb95fd327ad2609217dc0cdef83bfc9698eb872e28","sha512":"6a16ff9effc3dab5adfb854217420e8840969eb67cff4286cab0dc65561bca9fb25d25679a94bf170b0e1e65b6864b0bfc10b531b12809068e9029e57bdb2c3d","ssdeep":"","tlshash":"0b8000020a0208b3c20022820238af023bac002382828808a32ec0888e2020220c300b","first_seen":"2026-05-03T18:30:13.913537Z","last_seen":"2026-08-13T19:37:30.402094Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/cdn-cgi/challenge-platform/h/g/jsd/oneshot/aae2b9a1c261/0.5685096470027964:1786647615:BzvbRNTJU50Ip1w8H6WVqoIa3k4zl7scPDqg8D8LXMw/a2aa2bd95ed4569d","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:54.919Z","timestamp":1786649814919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/aae2b9a1c261/0.5685096470027964:1786647615:BzvbRNTJU50Ip1w8H6WVqoIa3k4zl7scPDqg8D8LXMw/a2aa2bd95ed4569d HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13820\r\nOrigin: https://ddosnow.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ddosnow.com/login\r\nCookie: language=en; SESSION=jd72tsh1te98jdgciank6ll0d8; XSRF-TOKEN=d9ccf2d30616065130a6e70ad1792ec700bbf1ee\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13820,"data":"IFVM6QvxuRISq7bbdZtV7-u6GDsEFW0KK495zjXaIeSl+U1-cs572-FxaW3G37P6p$ueu4ChO0QjWv7hnQ0Oerz3xwSTP1cdnZ9ZhKrbVufFsvQOeL0HnaVS7qWhP3BvfeVsB7bXg7IcX7yUb68ryQaWGXCWpPWhik2HMd2U6+Fyv8x7n8y4xI+ccbKVZcVdo9NcOFdIzWcgjg7P117TK6t33vdIgG70CS-Yzcsw1+41G8OTEAfg9WXMobMhb7mhVpVt7r3xZojrPQSePbg93HZ8l6pEfLlZ5f+fFSFqgZQKDvRkE-WkRsI7+tsW1sDniRsSCpImXQ+boVo3LElwUwtLtEP7H6E6KZKE3eYPg2PdCeChhLz-isNx1dcY3ARo2q-gKRXbfvuLooM-KUPlOAbLVeiUsNMFgYax+8h$VjSqbt5Cze75OkrFmuXbHh4-PCZPxpI8+GebeD1ViKigMVRU8vhmwe1tHIr1xKMvYKuU4BLWTzWq8-SUA3MGXUB4mpKvOOivYgCs3O8RfHhz$FydLVYkc5PHQj6jicSTrqA$DWWGndI93FBvicBMiYPnHCuNx3UKDNga00RlTl0bpd$llukSNyv5ooYEKhNXAVvy7$-VERX4KSjgZYCrYmlyDeO+j+0Di2MWyLd+sqOMZYlwXuDQDIlUEsTui$1-K+n03uiFnqRAwwEwdUGRxZzcwYgOhDeaFHN16LmQvn1DATp1pOa0Ka7vVK3q+QkyFWRkeNZBpjCLhOg9fHhydD$sUkfxoZL3TTS7ujQB-oTmOkOc$AiNgnxM9LQf$QB9-HKDRSckQ8b6IrxXVK58LMguOcD+-QY27sV7yYmkrSac2e3zSsWXGb1vZa-5rUp0rxXODMRXcTNxtnUiKFuzLUgHTIzQTnu+RnoEhKIHtPzOVKdbk7UFkrt6+ezbd6yjCAEWxbrW0DA+FWi8QMN9OK1m92gZULG6jjw+93DWmEQ9xXBxcyIzco85HyfiTMzbuiVQlyqocL5bos7E$6GsVUjuaMRgSxafQgTU6Hu+gCNdqRGRV+Q$4x0R4cLaxr8BhnYPF3n3yxcuk6ov3ijmnjm85c+34s90BosejiA7SeKkkSMezR-VwHRtS0383k5MxefqVWZV93hzKesW4sPdPpUQ-2aNIhtYiVegEC47Z0liZzt0BhrmW$eQOYUau47Azb1tPYhrmNkqn$e9qM32STT25IhxyrEC-IfMRNm8Wigk97+swEvT-BcWM$kKrac2S2Q9B2b9yGPY1YD24WnQStFcnZQslVwyg6q48qtzXX$ZR9mK5UaB6lLk1v2KzejCG24RMj2YLqH8Fs7dtbpIvVzP9K7-EKZfEE6Ot85NL5HUoskj-+y1P+AlL1CVjVwY0j0wmtdWV8ap8qk30uAWYLIShd9k08dx6kjSK12d$nT09dQwLkIi$qSbfeaZL$Tw$BY5lDThQNSHTBrxLPtjw8shE1$muDGHTFIKRcyYkwAloxGczzbVacCVgKynvjL1SQzyy$$7H6$uFd57tjZi8$bPfsR4TDaejGNw0hl6C4DXTSXRY5l7qBICbb1ywAdmXiMl5W9s0mjoI83dd28FW0gYUVNvLdz2Z2ZSsc1hofM0y4nQAYl7D-wvd+ntEQ2yo-QfVc7VrBriz5IgqlEvPBPAbhWf0LO9VGsq5u$5eLNQPsKnTy$yh0337+2-bw-cYNXobWDNdP6ccLnl2jNs+quMt8cHFits220slyPYhrw$EOPzKz4URDY$yqTueZnX99KyTSEBk-fL7tzrPsCl3+HDP$wD4Q6CD1oa7+ddarzGVn-oZV+0fI3L4S+7q4yQYoGj5aAgTVttvif1HaCjAPvDG-ewRw3ebp4eM-gOphXuqKnDhTvjUs+auiyFPo8RvARb7t88+bvmjzCLYPD$KBx4rsz67pEZHFw9v+gWOmDinGIHFK-IlW7ra+ZZ$IQwjZfs-7T5++9GRi4G2qGcMmvbu44tQg2$g0Zt6DdUus8Mcf5x9Po4WyvKBEpq8G0G8Rt1lZ9no$5GTuk79pOVZgCcxB9c4FA+a1gL146uGjN1IuigSnE-y2TZMPRf31RtI93Vx7IXh5H0z1aa9o2PB0aOpnvV3VLsLu3H8I-0DTRbGTLGb+TpG7eSEy8z-iuVEqEgIe9+Axfi3xU8-j8h46arW8UlW15vSt$MssEWA+r4bDY5NYqe6QnDikio48Gt99pC+59S1ojr77gbzvKjyGemsu6QEK9MiCQpliiXDci0Egm43MxWc93RWsupdX5fGIxwbopBRFygpeqV7-cSKHLlU5wsNgAAxmjGoQ9-oacYrt+M7c37BKgwtCoS+qu4oLGAO7A-VZNuHXa-31jO4pXjNRc$$H8krjYynNhxQ2A6YNzIio3POmM$Ec81mT3ZdggoLoaAhMiIHFtx7cTZSDZMNdeh98CLjFAVoO9K4nhIHw2g3CAvhT4xKvh8xuiKIIpnSh+Dcwv2Eo7OBR+Bu1xNWYjmCShNcWbApEEI9mZ5zDU5TOdXqLMWOMQ38nj-tLcpHZ53S7PdS4pYtRVsL39AEY7rp3$$dZxpicIDuvjRiB7oQ25h8hRB5uB2i6ez$7aI0YA2jrYqctF4j$NR96TP$LmoiWb21xjL-96BcGIyRUCI8cX+YMvPrL-N+WX6YGCfr8UQgpUUw$mu$n58IAIP3Oq4j6WT$yx$mP08WIasyjAHmTckSCIIgmk-FmVdT$WLWjFn09ViMPnRvwliB$kKFGLa+hsvAj+cj4ztsCfGyv+dhgdUx8$E8DEFCcihUvju8S+wHbFptR2aWZ$q3a8qAA$areqkhejvzHTvvlWKarA$RFOooUKz0Y7LXN7soBqSL+FtP2ej8kqKf5++HRi8RknBv1U1F0pStBMnrqjEKDSb6Heprm-9lv7f3Dat2RgHi6A4pDxUBh60Cm$I+9NZ9gIiReqRFOge6cweV8MDsOPHhbtGbAFTcWgKH6juF$3frpkz1BUU0UFdTVZEvlNPVsm2n0uS26EeLdDsIr6darvkNQtk5IHQAgr22sk$t-PzRYtMl94$U9pwsFgjP$ZHV2x5x6QdAVaSESbCo5nxKMIkhei0RYb5PWb9sAWh7kWbUPQYl73VsEtHjYMANz0MdF230IVUOoHKPgi$6cnF9TWopdRrjoctYCmARj2Nr$YUZSGgSjcVmUVGr80lSC0tptECauU-3lYPmZ$jV2xGDDYErQOwCWhMOFkjjdm9GKCncYDSbmEqjw84jsc$WMsV34SG1H0TLtTB6RTLfR4tY8Mcy9C+ZhO926cw0SwPT6P0DUWYNtQARxnhHEkYAYZ2CZiCfIh+bQgvM-1$Ncq6tIy3hy1Z+uqIf-Bk3H$CY6OUXumT1rv6B5sZDtFb2HyKk5eDaUteX73Xiy6Vc01O4cBQayEBEbw70bSg0WO0b4ydZjPNHjYcVLLFB2MHiLtP+5iG6AnkuFvvz1kfyk4ms9$cBs-bZc9b4$VYyFQAcluMn-Ag2yVwAR74ijMOZ4UZnnr-a8yuuTLVIqqjxoy4z$yxnatN5-EPXH8-qMhpKYk6K-QKCr1H5prHazHwZtu3a3LiWgKWLpPEPneGXWBU4hagsz3$c07gHMQbHxWfNMCs5l65ItbwN3ICRVShD+6ILqt7qnnh-tRtxNSXpIstQ2Dl-Z0cYiXrBHMoq+GWp6inMLZ7kuWgHevji1-C7qQZ5xf0k9e1or2Z9W1bz1V6-r3-Uhl0s5+4AAZkd$NEPSuOAqgB5RSrzUK5UljL62NMXllfswWli+5YOADoz7oXaftEUzz$Ie4QbhGnMD$figHirp1EIH+17yzqZ2hXmpFLmoETY2RPt-+B9yzIWa0bwTiptNRoFWLf6VF91HgT51OzcDSAuj3Kr7MYYRmc70NV$znHeI9cpXwrWhVjCmGiiII9N1gk6Rm4gPybTCvM1k2Av$RL-p-3CU7vT79yVNPt95Y31naeCbxi7QWdBUZANy3rIi1hco3YesNuZ69y91T5D-aP6t+Avw-nSzZS0cr8kyj-824-vtgjCTUmP8wsEOuZClnlL8lcC0AOWvYly8Rkut+xf3aT4nVyy7U689kRyk6Rbf8llCfj+9BVU5N3ihE3c22FyQpVVBd1-n3$yxVtLg1ei4wzG7zoaRFrvf9HWyZm097fFmZNU2UCPrIo2AmAolTblPw3ghhacfsiAB16TpPKvxtOH0z2VisOASn8FGQRP5raUr028KFzAxa+xCt-ZZrPue2qgyZSws+eFx2yk7EZE6x+3y3H8kmlK30k49qcX$2U$a86glWqISrnqGnmB7Qrg2cD8nD91c$QzvVCWqXSOnTq5Qcd5htVu8tY8Ikbp5F-BA9yCHX8uVQ7$yU6PwrgEmxLwRM+M2V-ul7KBmKs+Lb$scsoh-4yhzlAnYWy3Ri-dNonhM3AV7tuNUkN1+Q03WcB-4BbdPbV-ciQ41mtgD1C$I9eCODVqQMGZiflvp4U+uzAAUICKy-PnrdDGu6UNyQqKGMfSsPEvSsks0NcH3koOjyp14v2XpRWwkjLQcRXiXn$rCIkWfAAzy01rf$AMxCSU+pwxSmtUS6KROVy3ZsErAOkKlwXwFH8p+GRYaCPVPKjxy1RjW70WErVSjNpY5fs1BumNAMD1MpOwu8Qmx$vKmERle6z-SfYLYU5d$$OuGSa6OO12hlN7NOrlauuYFbWaW9BcDWwoqbdy-4u6Y7FdQQ1+z1P5cBMs9vTDwgmk95171mRCpfaCxB85fz$Soipy9aWFe5CfMSvr870$W3$CupZExWpDxUV4Aa7b58h1cnWoTHcXea1UULcgoHKWOO-6$Z5RBQAbFzF66m1+AGGeBWvDttV+Z-q-uTqykGbb+njHQ4Wq+4NolAemynRRCViz-sWEOCkl+25cYvz1l8Yxc4H6cIxnFVLO-KGZOiYi+Pdu3KE3lx$bwdX0yxU1KoTi-lWSYRMeUA$pg1nQdFnqsNRDk18y1ys25ALsek0MTneCqx7l29SIkdLjTpgAQW1Fe5C-bu1xeXFTRdvTZXFytEDVQIfrGWDcGccg2MldlP$WhyNHpPSoSPVrAwlrvc7hBp6kvwp-0KQ0FoB3OUgWbVUcjwsyB5q$cGy2rnoVqXaG7cbrD3+t-yzedbHfTAnxGajqzOtXQl9looLxYe0cPc7728nqyqRG2cpGLwU9NtT7j55-xkf8inlo+hzsq0gGs9DSIixlOaMCWs9susK$Pylx0T$WBmU-yk6YX78oBhL70GrbtFDfInlsbLgXtX9xxliHperCvRBvHohigdMzyd3Kgnn1CWQS8RFWTQRWkIOAae5g8GC9FvfQRK$O7ikHDjEFH1-1zZpB-Q$qGh1gMrVgmDDUMTx86IFT6CSyPEQcA4ICnFVN4jt1qNaUDvvsxEtjTBZTeRMit-DL5p54TPMRhdFVjrdiUxYshnsXaEUMjLuVhjxDrxmi2FF18IxajH4vRDN1uwY7zcZSg0yrVQAjNVl2lNFrNL8kUrrTXXh9m6qUtzUS$NMVVyYATCFLm-8fOTsSpFVN2nG6R+CRpgcoLyguvGYvOZcKbiStd33MX4xct9imVXOQVDebcTtPRNYy6559eUBx$a5MSUyRrz5V$oupvCLkMGcf3nIwjlHZPQ28Rb5tozRT+87fxf7Fy7IAmyimjT6G$joL7wknX0Voj5S8FG$cY87q56dx5ncBps7zQZb14QWMS1TzhlqU9X4+GampjABPRNDF9R6GrtwYTj+vxGy943ZeXdqXCW1pfbNVw3cGW9vbZWlqwiCuKWOcc26m2NfwQOO3$Zd8UUtnHFSVDZXuWCwQbiaGZuoutf0to+aqc63ZApx3aEpH+pCIfpP9GU-gDnRZ$bXD0nw5pauajsdfBgD7yhXCnE-Ih1o0SKnDgGOBOpDUqOrRKC9uF2ZMd9NU6O-iFklzMSQhK4wdGt$zY$D32xfYTUUIeWZdIjhQw-jIpIciljxvRCoM$l++UcEsKFj4pianSXtisjr6pTQ4W7Suev2d+afuEiVOYkQhT6EwFFx2KROo1XDO5a6eKsM2Fm0wB2i0uc7tbcV7Pns5HsOURSNm4vA64wZaNy+vG7ceFR9ecWVIbsjXDMZNl$3ltj$Opbfo1EFy$3DnqTLTYP5XyLEftWNZTve2LuLh5aCnoTex+wtOUeRafqTzXC9Wzao8Pj3EH-H7Gz+OjUnUkL042r6O0OZ9YVqNOZcOoPwMuZgxRTBvdbEP+Ej1VifX$mN9PspIkL$MNNzTr4RwUt5+Nf3zBzQkE2Dv6vuIKmaxM6iCcRjGyI$a3QRZiuzRF1ZHu$yTd99nYvkph3g3cnDBXTmhR0cbIHNV$wRZALiKn48xQ$$4L6P2kbZ+li5j2C0lhRtgyzgqt7Dqfs41EjIcvkcqO7u1f9Pdyi$RvrLQd2+ESlhONBEcGtir$yZoaR4cP0a9ZnUXK+LZmytr8esyeHZcAkMdipkZIfzQHTT6acs0SFRzFuElaiXvPcNP6-a0Ub0CWhS5194tFQxIpCEbiP5mLwnGtvrAExHuCgYTtuVKa8Y99ZUCx5pWXHOMcameyeC$QSozM5kH0HQL1VhaKhp8RR9UsxLtO1c+$h$9-Ub+IGPel8VLViVBQd7dsOf45ND+wxS4jHTYeP$ls5VH+PMvQjuIqQvqDwyY$dP-du3csOWdPH5oxF0DD116vWEfNZQHa+TD51yGE4zNeUjzPMBSCmiba04w56gTV-zRqTBFp2-6Mp5YNXXB$kvIpX+brCiLr+NWESp+SuH82cQTWaKe8+6WzDRyKhnsX6I224R0C38TpL-r7jgPqDAly-x2CMS03sITT0V0A-fea54xCC1CZlHSpm+h0SoivbcNEXUEze5jkszGtCGMGvxmdWUcrr$rXLhg+YYFPPbqj5jdbHSWuQf4Q658R6OpDSL4qzuHGWlY6x6LCimzSvRUIcZCPwhx49SI9vKFx9ldA6gPRIphf2XF7g2mmdjYzGLVIbkyI6BPMqoSiYcynXOu6pMQIT-Cnj6O$Ggw01j9KWenaZbB9R4$ggMEhMvLYINQmMKq4UHEo9tqNt9MKiNYr8Pqx6S77bWRTBc5EnmZEatN-BRX9iYARhB3YqDp4xxIGldyQ-xN2fVEDSGR6ZtxnETP7srxViF9-9-0S+0T8wc3THeetvkYjO4G+7Bn+v$2wD4Um7umoo5EjuLQa7frnyILq0hRt0ynlobArWlYhdlMn1XvZn6Z+VltBAwisuwUBclA7V54buRd4hUghbvWD$yzRGOERab$4Sh8WLvhUnpFXE7AqHGxRlRhgUQMVmWgcTmjxODzzHFduxg1SBnK8aify+mvC9Nv+gtyLsRIVEcpMEijVZPKiokh2okZu6GbybfaT5GmnZD3U2obGKSQ0zcgoPtYLbi5NUgSRznUAzwPKLQ34Rr0kL$On3kzt1SgBtZFPHAjlkczj8OWMQ2HO5K2RNm-l0vchdYh3TutrvQUrncPndMHo4bvixDOirSEr-PfjhSZyyp-N4gSIrkjkNkubGKUb$6rpySn5GcllaGwjNAObFEffgzlIFQmCZmEu$Bzdu9NYq+HlKkm+FiI87vxy5jURsDHz526bZzvPnUN7FvhvTN72KREHTGuhU6sZLwNNZCkMKGf45KL9A37930u-weaVkkB$ReHzx2bgGUGupKCueuEFAda9SjF1o+p6hF1ViZ8OvrQ9lqPatVsfAon0aUk72BXHrIFZT$Wsxc+ksUaeyiN$iN+omjTqkf3t2Ay0XYolr584UzCZgiVBVQiGBGsX+EyEbYfvPQophAuPqqUmBeLKz6wVnCFSUgVwSgDc3ohVLHsRhi1872Tn8wuaHMSvnUgtXGq294BMG6vdzMc6A644bUf+PVt2r8yp3yLGwuIiHHH8-Di-X-UzcU6Pgp0IHH+eOlu$-2VYl9q4Y7T22ca70XtbonagVhjNCIZb14GmL2m37cjmhio3cSXaLP1ol20dvRgmgEy7k94IMOPcjmLFriURYWxpoHOi7dQgKePgXVPAf1Im8g$ho20-ZhMUG+T5ErPQ1a2W0XPXnz8roMRp8HnI5K2Tq1FIhRVCroPDyv3gDP8LOYNuG-HoMwaNik3fWvk7gqj7Ujcqt4p2VLpIAig3yIHBX19$BKOZ7DEFoAVsrg9Hi8QIXgUtzE2vlFVHlvnUxzupPzKDXyUgbwCQhT3oExFT$tOb2pwkNlGdTyUbpw8jf-F9CG$rafa9XcZp97Derxt03DNoySAEzZzvyPKprtaeZS+ozTY6kjA2X$bbhEjWfhIgfjyqgb+HMcF4ioj0EB1i8ZG06N0S$I40tS5glunswcUb8VZZiN8$tUdNu5I6uknjMlGMAA0OdgoV-oLBT3QLRtbdYXFtdXRpOW4EF+pHd4UYjYHb24Z$HIRf1AmAYyTK$CqC+uItYxx-2LtpyjipU$XzeTz3cNsaOoH-3Z9kzQuHqTF33QZKMKxsE6C-+$epGdr7NPPD4k6CrzWIoxBq1HSFGOWp60rsTngwljNszbmMXAMZiukEM92Lkkbnb88OBrxsDdBl5HnyaHUfpsg9xmdAV0lvFfSwl1Kc69jlUKwaAWZIzpzbLBGROx9EdM4XdBL$$f25u-aUtxoEvmjlK7hcrk-SRHjsk2bmv+duQroQgz+4oUZUF3AstVQE4Q+VhAaObKH1g+b5Dce2O046yOR+K0oFUMBLQX6mi5X-YqeonRpFfW0-OE32p5qggSI-yn5BM$+FzgwpoXsRuX5vWVCE3+T1DvGG9zYDOhdtRlY29BQ9LALC+F4sIDtf28K1EkslZVFQyBoILCWZ9d2X9VtNzekrncHRyHukfkxci3yhQ1WqznNhX$EYZ7OOYvCYChBPdixiuSvTOvfDpO6BVgwVIHBexZE6IX9lEmtxg0+8pCgsrQmM2Rjsa6E1yWSpXQBlXjHPflPZCoAXH57F9tbBTCQyzof0eLuWomdatWGQ-Og6PX266CNv2kVuSdOqCq4WHddUaGWpiFalTCObOTDa1+5rs8VMfUUdDE+N+AjrfCvi$OyVA3eGn4HGN+u8bVc6UDV-Nt1cZGvI1dl6hNmMXLwSiGt4znZNg9FL+c0YRmQ56zmjVKn2MU9RqvUMPUkoM4t2rmzc7MIZ$g0j$8jU+MwllLKdzwkr6edxNLt7frDExASx0NMy4R4MByhqhtp+0Nc4KUT5pHTvZW9qeS7iRPmyEDTtfvV2YPFjTUIsCydq4CZqZC2B2ge8UtuhxOK$bMbLzoOKjbwfE0iu3qi+kRwmebW5IAbfHTIM6rpqLo6mFcpUna4Hma9X098t$UeHZP3SAR1FihKyfrmCOGEzl4-jIXh5iHM6ZH2s1+0klpPjSWYMr2i1irgsBlTWW+opKCDIYLVOnexehl+fUurbaBqK+s11wQnI$IUdfTv-7ToV5i9rCl$E-rrK6IwUnQQ0$z5mfVYSzGGS7Sstu4Lttwbi3$RDRlDq8PrMDAwB1yyvEAgQDCPnrPFbrBN-Kkrxz5RbX64ymRHMDvMAp0RuglcNBegiDWBVrfTTbATLsg2uSSzicOaMxPAxid53l0m9zaOAfAXIqNgHhrhZfXlTjPSMvd56k9DVNrc0baAEn0t9foCUsLI88VYMfzoaojn$OGY5VBXEUxDBIy0+K25fzj5yZsHeUVhbD6tsdwkHLKKq+pL+WIC+8PybvRKol$-x5dyaxeTeYdlUZIvP90NSBkwRpEaLpUdyr$yM9FGw18SkGdEyTuOcLBVvi-XT4r44PkSaDbKEX$vRHZw1YryTXejhqr2X36fIR68zCh0G4rkSHfL+clwU$ClGyMFYu-OyQ7-7cm4ClbQeQiEXqdRuCFaZeGwr8bt5OI5KDENIAD3VTP6tEgPwq2wFx7hT748dix$pqIuv8d9cGc2YObisByIMzr7HwexvYQ6jEoC9ZZmU9DWfXgUS3vPu+ASLzRsk04oq+8kUz-r7Vq9Xxim39jTTaO0wsXVBebBgbhQS5g9aN-Y5Agi1bfrN9+qj5Zd56MRTxWUubeXCtQ0gW5v5d14MbOszsEnAHNs4kkp5mQo1Iw3i3Dg8C7lIp0luOLb212GAReve31H-ond67hwkX4Eb3OLfhQqIhs-+aO2KObfd62EtYzYiGjUu5S47oXIMgdaE$-6VQ7-dElat5O6$mIoO2MN07RT94fncINcoFNLtN+D21aWKwfv0NqcrqXG4dW2WvtjnZx6BOy86vfqTHYTHwAb0UHAdYTowsqc0Rn49I7qqHq4Gl-9-1a2yaILY2FtushB5GlZV6wOOcrNC26gGp-qQ8YZNPu-WUywcCHZqMnfCaNbikW4y$+TQmkO+f+TRlN8F9SFO+D3zygy1Uue5D6wX0EgiweE+FTPtNixKw0eQu4fPAUgb-iCYRXPDChK$k4IBg1H8q11R9pO+O+d9v4AzVlXRxnTgiBwkPC7BORQ3TYNW81gEdMZ22OhVz0EvWaRl$puct$LSDZ0Qx5IC8E4VhE9tUH8LbQ8S6vWgKeimHW6ebIycHfWWXVzWiqIyMreHZgWKnWQEeG+jGHAdwjy5G3Fn0zhWZ0I36gv$l3K1oKHOhnEEmZ1syLfFm$XSjl9w7IjliddHX1kmnOk6$Y-A2Z5-$ud+$TmrN2KOxx9OPnUfTW6hL47H2Ivn2n1RDpqIHygfXYG4-mDzEyorHMCZ+8ebRzf5DeRcnuX7++5ERNw1fRkm1oAFKpnxFPjQm0C$mvmDLrADt$-hw-3C4pZVI1Q8Ivg25Bjde$ep+UuOOg3ZD0MtnVud0ZDEuhtg8Fv2sCDC-B4j73z-4aixYGau7bI+CcM4atyfiBWfe8DXXnUY5qWkxQdaxKgn$vnQM3S-VozQK7KcOAE9b2aIYYx+GebnWuuRduGAATonCNVCx7mPtuHyssAGUXUZFXBAxbQ9OnfdvSfCSc1eStmKnyFjyTTqVQkvXMMulwfZt-e8Ke5D5C7aVSV84EZT+9aBAc1lB88BeqEMcioPdHfBdTlqAycY-lv$ox4W5xFth+02$lhePxG21eZ0YmNXww5BMCXfqBrqQk6n2vemD0wII4LFmrSELrDD+gtusIoakHGaf14UDi6pYLuTKYPLHjzqs1ef7XADd9p41wX932R6lcabuduaBtVyqhGX7fSp2oStUX9hrRc0fTNi2XYyjPh098eZ7RWpLUGt6vzsOjR0kT7od-Y2A+pgiQwVp-QyrvV-WY5+UCq2bsuSH9cLl1CvCK7gbgqjYHDCc51qIzxKexUgHmioNF1Eic7GiP5u7x3ePPwXKiYazazCrL--$jOCrb-6+lervPQxiC0q5t9L+YwiO2fpM56s24qBUh9tTDSboNrEqsFoWHuBTfxyB5oZuRSeCiZv2mSl6PQrhM-o3fmifI42LmxXlHCCsqqTgvl1C8MnwWeiHt29lLU9$hRcWbL85Gcpo0DAzMfb2-31qC6OeW32$eXKyeks87+IMbtyWEHkB+bwPIenf7STeDeLR9VhUL2pswx8GPLN$l4-eLUEWAdhOs5upVTDCdF83QCqhGB7Xi5k+qKUGgLAke56cfEU8ejKvnA4YytSCRUfPPOwddSB7mgLvOlScqu811wB8kWrPeEC$l-jKY4YXaYR-+bvRCLv9M4VTNAhSTiCZcEb0Py+nBtQPjRVI23CKbFN-4cnDvjnPyp30Ep-2YWmoSBNi3us+Kd4H-B9RlIc8goHjEQOHCfjLdga-R8okg6UdDPDqsITVpHs97C8wcMN8GF+i1vgPqyd+DO7nbjFcO8GEGgZchzDHFyNn8xA2NbMEW-jTw6ivhiNuxZZ0Pg5ynX1nHuyRi1yyi63RVlPlDaR1dp8hBrVh+dGnOp3QoA8AUhG9ImzfKtfj2RYd-wVl0n$HMg2KnfM5sYZwq8SkndsD0krUARw-AnH5MDuGw2btIPcbnibAbkarhQatgGprM1lmaXGlnM7Oc2DVyCroBgn3WiB6ADOyDqClUYy5vXWcFYzF+xnWrWM3r5HbfVmEl6Rm7EiCBg1uOqb0WPTMt9YYo03lozbw22r8sryZKCvSDyZebWBIIp2upy6KsiWPU1q7su6a1$9LjLUGb++4uCdLCicCad2TZZCe0keQ5hrhl4imOWM1KoxXgKbaTZxBvUYxVBLeksQsH3RDUQiSWIlwe3zxGi7Q3ywnCsVhsup6V6XXaio7k04tXCN+yoMWRVpREeeHbKP3Ox5fmWoiIXLIgAG0EnFuZOj9mCLy4C4XM$-+PrmoCuFVWj9WwZLMmAWf-0XqMNw+1oWkw99Zgaj9F9uT4neM25WK5o2SdKdUtTbwt9HlAXzk1Yc2$zvnoHyO7YEh$4mZaznhz1kru-89b9p63vZT$DfG0Dt$pRlbkvmRiSLLhuP$lVLE2yPBxTTAUdrfS-2mBKCbCFi8LRb0ztnmNidrcd42bojFffL5Zeo$$dw$OWy54nD9HxjfWj+jz+YXszHGAN92dFf9nDkeFj$$lOnanF+mU2G6-kEkMywCh7ZtE4W5wuPvFXtjQW9leoIQ5cTC6DDAK6n3OEEDxwIvKcUtl-pYQbFMjcR-9zW7A5Uqe4eLj6$Q2kLxz6pmevlLSrGuL-DDfqIUOqcoBxmhCyI1YrF9fzjy3WGR+SxRT-8Agq64Nl3tk4l0Q2PdkwfglrLw5bCF5UVPDGHct97rsU2j-qgVcN-AASFrvQ7v6vNzjU$$k6W8DZauayesfCKYYlZEqB+uY0obhO2cF4q9qQ6IDzaAs3HnpPUe4NYrUNOderVtwtxes5Pk4W+tKYHggWEkhg$kd2E-ldPtdtltxMjQOiQuKaMw7N+vopr-IQZ6q7RKAT4DoLvB1f97yPCEWjtmaFT+sgRZxYY9XDDxKM0OhZa3RnLTKGPM4p$TCss+5XOFDQvH-TXKTorIcwE7C+uhWokI--l-VL4Kembj9S29p6GosIj3BPXyY9Ejjvr$ZQqhmDm6pO03O5OgtcyKWFZLD-aVifCvn5$qGgQvUstj3GxGTCd+HKEClK4xtwObXmMbU3yvHV4K+rqAV19mG04$$dt-8Th2ILA5zR3bYg3NU5tqWfHKYsiU9MStgq8bUqs8beaRsCCmEhwHcuwI4rqGNRSX+ZOfEfOBjpYpQ2E85W3jBueWonYoqOY3h2bMbhE-YVhNtXT4y+oIMXIhDrdSI6chAQc1GdN8zUNyrgv55HZzF4sZQTi5VHdFXuCosvzdV1dMLhDEnMQuqzcS8SEF-h40p-Ft4ZsX-CB7Wreqic2sjGTi-MzhRFYd7x4k9w6asEftM1nuBHCM1SjhBLnTs8k9Bz+rCtT5aO--xvav48+yILxfzRUo4mS9939+Zd0M3xqaSQu+5QDZdUUQtIOtezta9vEPhp1FVvkztS1A5OOX8XygF-MNk66e4Qqx0giX7YfWCf6QGgr9KLrd9xgu9n5$EmuWkl1e9x+jttCVr73O2ji8zbOsgWP+R4d-G4I$QjGgPRmoX+CgbariIEOFTRICejl3zpPvokYCGF8mQha8fR1B+7v5gTdxhPMMMWRf41ari4EELjubFpSnl2nUuF-xUZWNKPr777e05lu2+umNf1M-6dVW$4DUeLrEeDzGnmXfVov$gnZPESq2bRptXsFtPunvKB6BZuXPcD$zEigIYQmgpxNyuKItWAhzkya0PjTWLlZ7QOHxi9h7gypnNmGfuVSX1$rLNiDb-FF-89xqj0rUXYw014ez1hTWPv$26ADFOAf7rXc3waRrsUX-gehP0Z4eECjSAYwEq24tHcHhi2p9$6DSM7sqmw3wzuA9kX1U40w54415N"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: dCOY+55+th558X20jKtDo18zdbUzrcDTmV3xKB+8XKkfO+quqcK5bi/8C9LHlqO4mz4TZvU7z3qPgVxwrYXflKvbCpyJylptPzhQfiZOaYiSaI4EijLHrV3jlm3KocH5y1YbQEvwqsJpSSKArwOmJ1NdmHEBVDClsuXyOLBTjKe6AeF3/lavpGlB7I2hJ+dgnWxFahlwxvlkZLLyKHDW8HAzw9VTooRlaUF/O/m86iDeQsUUn2Vxv91cvll3C9ZnoffI+qKZ+A1fpx+RCXHnAg==$RkI+H1tkRY73+8lI225Lug==\r\nset-cookie: cf_clearance=mvnZIB0meENm79dKai1Qi4V79Sk7Ihc06j4Ztqf.j90-1786649814-1.2.1.1-nHNKGAm7WrRA60A.xkd.IEgZe2NFWpmqSjFuXUwtkWeCDHSRTcS.bqZS_iHCo1rDSTXEiGhveRqfC9ExCRCGyYBt1QEZUqyUHbHaYJaROXC6KeVRWUYemgtbqKrmUKb1p9HkGgLYRIRye8sQ9c6w94MNbWpT_q030Uy5Xb570_PIXIs4669QuHoB.D5wz0MkdmjwaLBitDEJxnKfi7Yv6OgsTt4YcJXkvvIMZ6uczL_aUOlFbNEhkAO2SM7Nw0YnmVrTrTmOsR3NtbGcOMqZfJgH4wef5TAL2SIB3m1mStz4C_vTRVe6NLAbh7227BISqpMKCKsEFnTXcG9oy5ohLrOHD72cQh3OveujpDvxb0E; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=ddosnow.com; Expires=Fri, 13 Aug 2027 19:36:54 GMT\r\ntiming-allow-origin: https://ddosnow.com\r\ndate: Thu, 13 Aug 2026 19:36:54 GMT\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a2aa2bdf3ebd0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15743,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T23:51:38.251444Z","times_seen":17878093,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/img/180.png","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:54.980Z","timestamp":1786649814980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"GET /img/180.png HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ddosnow.com/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: language=en; SESSION=jd72tsh1te98jdgciank6ll0d8; XSRF-TOKEN=d9ccf2d30616065130a6e70ad1792ec700bbf1ee; cf_clearance=mvnZIB0meENm79dKai1Qi4V79Sk7Ihc06j4Ztqf.j90-1786649814-1.2.1.1-nHNKGAm7WrRA60A.xkd.IEgZe2NFWpmqSjFuXUwtkWeCDHSRTcS.bqZS_iHCo1rDSTXEiGhveRqfC9ExCRCGyYBt1QEZUqyUHbHaYJaROXC6KeVRWUYemgtbqKrmUKb1p9HkGgLYRIRye8sQ9c6w94MNbWpT_q030Uy5Xb570_PIXIs4669QuHoB.D5wz0MkdmjwaLBitDEJxnKfi7Yv6OgsTt4YcJXkvvIMZ6uczL_aUOlFbNEhkAO2SM7Nw0YnmVrTrTmOsR3NtbGcOMqZfJgH4wef5TAL2SIB3m1mStz4C_vTRVe6NLAbh7227BISqpMKCKsEFnTXcG9oy5ohLrOHD72cQh3OveujpDvxb0E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:36:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 02:22:06 GMT\r\netag: \"6a52fa4e-3040\"\r\nonion-location: http://mbxbw4lalgzhb2c24isv5tei5clkhgxj6umatlwqha3rqbrx5s3hehqd.onion/img/180.png\r\naccept-ranges: bytes\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y3qhvSunrxUWWGZ4%2F2jvAtZajJGYxpoVtm%2F4QeLOwjoS4uOPjZ5bbCDB1NjILyh0uk4CZ1tYZWyYklkAWS9tfParbSWWllIUbUr7yoK0bVz6PstOUkydIk7ivZ74mA%3D%3D\"}]}\r\ncf-ray: a2aa2bdf9ec00b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12352\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12352,"size_decoded":13386,"mime_type":"image/png","magic":"PNG image data, 188 x 180, 8-bit/color RGBA, non-interlaced","md5":"3b78ac07de0b0bd3cf9453de2b337cca","sha1":"3eec31967f83371e256a405980663c08ab512617","sha256":"c2fd85776af0375fe976a1504a4c4ebb9f93fd45059d2ac330757ab8d43f3e60","sha512":"2c3631eba7eac08ca8b7ba315e67c7c9ec4b358758199c5c0c68164b43413dcc825517009d22a1d0975f4ffbce6bf2a2842854600739f281961218b791456fc7","ssdeep":"384:M7RQ+uvPJYDrECMd9Lomt6Zb2SfF+TkEuHwe6rrkY:M7RDuCr7McmAZhtgkEuQvfr","tlshash":"0342b0c69ce0b998d38f7f0d29a4d0b02bd14b863657eed60089b52db806e85a90d15b","first_seen":"2024-12-26T15:48:34.016863Z","last_seen":"2026-08-13T19:37:30.404608Z","times_seen":6,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/static/js/main.6d88ea2f.js","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:54.285Z","timestamp":1786649814285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"GET /static/js/main.6d88ea2f.js HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ddosnow.com/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:36:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 12 Jul 2026 02:22:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a52fa58-8a566\"\r\nonion-location: http://mbxbw4lalgzhb2c24isv5tei5clkhgxj6umatlwqha3rqbrx5s3hehqd.onion/static/js/main.6d88ea2f.js\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0zxmaMM4TNM2JYpaRHkO8dOeCVnz7A1AO3uK8il%2BTRsCncjAFp8hKmue84djzQ3Vl5CpCi9jVo0XtjC9NjcPo0SE5yapvquFSSDpvtCdd%2BGsZIr%2FHGhzWqhe783Sog%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2aa2bdb4e950b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":566630,"size_decoded":186521,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"c8eb0762b300f5b7e9f34d475cde8943","sha1":"a43e5a13432a8345bb2705310315233b00383ceb","sha256":"0019571714cc80286110632c0b2677f3334641317a347a1cbaf32d2c46951a79","sha512":"0feeb656269e6e1e4761ce5f8b4fe059f755ec297cd432fc6fea0066360edbe0e0dea54bf68312b03054fe2bef45b6057de19bbdc482c43fa63a84ec70244fe3","ssdeep":"12288:F4ABZ/BWwrC4ICx/UfKnHyIk1ZWFDbOQ+:F4A0wrClCpIMSIk1ZWFDl+","tlshash":"07c45cc53291f0a157e741e6407f0606b33a1d1a380dc464b629fcda78b499ea2bbf7d","first_seen":"2026-08-13T19:37:30.405275Z","last_seen":"2026-08-13T19:37:30.405275Z","times_seen":1,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-SSGSR26KRK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:54.797Z","timestamp":1786649814797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:06:08 GMT","end":"Mon, 12 Oct 2026 18:06:07 GMT"},"fingerprint":{"sha1":"BA:95:90:2D:24:46:69:E3:91:01:2E:0F:2E:73:5C:7A:52:38:4B:B4","sha256":"13:70:D8:3E:0B:A2:B9:38:B9:CE:9E:5B:8E:2D:0D:92:96:C6:06:EF:29:36:F4:A7:7D:E3:34:75:6A:A0:E8:08"}}},"request":{"raw":"GET /gtag/js?id=G-SSGSR26KRK HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ddosnow.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 13 Aug 2026 19:36:54 GMT\r\nexpires: Thu, 13 Aug 2026 19:36:54 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 155429\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":442310,"size_decoded":156033,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"ccde1b3fa2d21b5aef9fb05a6dbf0bf1","sha1":"0fca0b9e298fdc2fe5808e8543ab4dfde638a63c","sha256":"938d10f47e39880a921aefa35fe0ecdaf6cf5a1908eb2b1b8b1ce88bb502cd6b","sha512":"272e5bea75cb0247d0843f85d389546000afc96f80355b3440420f73d323ef138ddbf4fa27da9f6f24c819530af0943d584b42fa352fec39d95d3e46eb4c740a","ssdeep":"6144:4MhbBD/1ESJaC0XX3iRxnOF7hcgLsegErl3POiwTyMADGsUDvwN:9hdnaxXX+xOCTsDGsaS","tlshash":"ba9408cdb3d674669392f078503f018ba67a79a2f44cc899f189c8d42e7469a4237f7c","first_seen":"2026-08-13T19:37:30.406164Z","last_seen":"2026-08-13T19:37:30.406164Z","times_seen":1,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":37,"receive":44,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/static/js/406.8b0fd2dd.chunk.js","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:54.811Z","timestamp":1786649814811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"GET /static/js/406.8b0fd2dd.chunk.js HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ddosnow.com/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:36:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 12 Jul 2026 02:22:16 GMT\r\nvary: Accept-Encoding\r\netag: \"6a52fa58-3344d\"\r\nonion-location: http://mbxbw4lalgzhb2c24isv5tei5clkhgxj6umatlwqha3rqbrx5s3hehqd.onion/static/js/406.8b0fd2dd.chunk.js\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MA9o9bVu4yEGFFwt6il98iSRTZUebk5%2Fcfs9S54LTEyeZSIfc9q%2FywAzZheTwK7flZ63KyeQuevkxqtHkTow8nCdcdtfvTraYX3YDkjsJ3bdkvVaVpgR7ZXv6QbwMQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2aa2bde8eb10b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209997,"size_decoded":68542,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65460)","md5":"2aeeca5a610664d73c6e65697afe7790","sha1":"cd368f403aa3325a7bbafc3a7668b9985bf831db","sha256":"7299bcdcc036c5fc2afc9bc9b64f7c6fe99c6610a37140a45a7593bb6604afde","sha512":"fe7696b3f8adef140d9e71a5a13b92bb5539fcdc49fbe152c8fa30fbebd114482fa186d3571acf38e5beab2ee5f02d18832240d5ebc14cc04e73bc98c417e292","ssdeep":"3072:VfW0V7rcEeSdcHw+lXoyGYMQm4+GB/nIuQrHhGcE6WB/EFpaLp:VfWoVdcHwqXoyix4+GB/ncBpi/EFpaLp","tlshash":"9024e784ba92f0b557a364a0803f8507f27b6f68b00ed0d4e2a6d5d56c7898e9173f3d","first_seen":"2026-05-03T18:30:13.861221Z","last_seen":"2026-08-13T19:37:30.407178Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:54.818Z","timestamp":1786649814818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/aae2b9a1c261/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nserver-timing: cfExtPri\r\ndate: Thu, 13 Aug 2026 19:36:54 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a2aa2bde9eb70b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T23:51:38.251444Z","times_seen":17878093,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/locales/en/prelogin.json","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:54.998Z","timestamp":1786649814998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"GET /locales/en/prelogin.json HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ddosnow.com/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: language=en; SESSION=jd72tsh1te98jdgciank6ll0d8; XSRF-TOKEN=d9ccf2d30616065130a6e70ad1792ec700bbf1ee; cf_clearance=mvnZIB0meENm79dKai1Qi4V79Sk7Ihc06j4Ztqf.j90-1786649814-1.2.1.1-nHNKGAm7WrRA60A.xkd.IEgZe2NFWpmqSjFuXUwtkWeCDHSRTcS.bqZS_iHCo1rDSTXEiGhveRqfC9ExCRCGyYBt1QEZUqyUHbHaYJaROXC6KeVRWUYemgtbqKrmUKb1p9HkGgLYRIRye8sQ9c6w94MNbWpT_q030Uy5Xb570_PIXIs4669QuHoB.D5wz0MkdmjwaLBitDEJxnKfi7Yv6OgsTt4YcJXkvvIMZ6uczL_aUOlFbNEhkAO2SM7Nw0YnmVrTrTmOsR3NtbGcOMqZfJgH4wef5TAL2SIB3m1mStz4C_vTRVe6NLAbh7227BISqpMKCKsEFnTXcG9oy5ohLrOHD72cQh3OveujpDvxb0E\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:36:55 GMT\r\ncontent-type: application/json\r\nlast-modified: Sun, 12 Jul 2026 02:22:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a52fa4e-472\"\r\nonion-location: http://mbxbw4lalgzhb2c24isv5tei5clkhgxj6umatlwqha3rqbrx5s3hehqd.onion/locales/en/prelogin.json\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aGcJJg%2FN5sJo95KXxFK53J%2B%2FtAhD99yoCnmwZB7PGfNBENaMxOEVswBWhHr8Rl4Iw%2BEAftrPWCFRB80MI0yzooSOc7UayGIOfbmIiT2XmY7q0zYrJMyB9GSjSpEVaw%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2aa2bdfbec20b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1138,"size_decoded":1449,"mime_type":"application/json","magic":"JSON text data","md5":"5a4f9c818b256e5ee3d802443228ae96","sha1":"c9d93f23494ce4397ab2766c7f48841238aff5f7","sha256":"5972b2fa17e1ba41472f2553cd6ad8d281ede58ef45daf5788b23c55b3278fe6","sha512":"a2fcffdf723668404f91cf31aa32d9f8a77d564ef28e88100bbcbc449c5d6a1238fe5207bf64e172a38df358f4a8d0414ab2722c8d8a159e95657c83e76c33b0","ssdeep":"","tlshash":"38218b38c9d00c8324c322684c329841f0a0c19b7c147c89b7aca68d7f4f4ef44f96a7","first_seen":"2026-05-03T18:30:13.886527Z","last_seen":"2026-08-13T19:37:30.408109Z","times_seen":2,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/static/media/fonts.631ddff939c0ad8ae2f5.woff2","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:55.193Z","timestamp":1786649815193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"GET /static/media/fonts.631ddff939c0ad8ae2f5.woff2 HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://ddosnow.com/static/css/main.ea2ba633.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: language=en; SESSION=jd72tsh1te98jdgciank6ll0d8; XSRF-TOKEN=d9ccf2d30616065130a6e70ad1792ec700bbf1ee; cf_clearance=mvnZIB0meENm79dKai1Qi4V79Sk7Ihc06j4Ztqf.j90-1786649814-1.2.1.1-nHNKGAm7WrRA60A.xkd.IEgZe2NFWpmqSjFuXUwtkWeCDHSRTcS.bqZS_iHCo1rDSTXEiGhveRqfC9ExCRCGyYBt1QEZUqyUHbHaYJaROXC6KeVRWUYemgtbqKrmUKb1p9HkGgLYRIRye8sQ9c6w94MNbWpT_q030Uy5Xb570_PIXIs4669QuHoB.D5wz0MkdmjwaLBitDEJxnKfi7Yv6OgsTt4YcJXkvvIMZ6uczL_aUOlFbNEhkAO2SM7Nw0YnmVrTrTmOsR3NtbGcOMqZfJgH4wef5TAL2SIB3m1mStz4C_vTRVe6NLAbh7227BISqpMKCKsEFnTXcG9oy5ohLrOHD72cQh3OveujpDvxb0E; _ga_SSGSR26KRK=GS2.1.s1786649815$o1$g0$t1786649815$j60$l0$h0; _ga=GA1.1.1299613355.1786649815\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:36:55 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 02:22:16 GMT\r\netag: \"6a52fa58-2f0c\"\r\nonion-location: http://mbxbw4lalgzhb2c24isv5tei5clkhgxj6umatlwqha3rqbrx5s3hehqd.onion/static/media/fonts.631ddff939c0ad8ae2f5.woff2\r\naccept-ranges: bytes\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7BtzcDtleyevfNRb9psUqSSJYrmuooS1gp%2B5EsjVBFVGClalmhTnbHUIf7nr6pbtzhX22JTpTkcsgg5jdL%2BxTsCFAd2%2F8HM3mnvCXs3oqO0ek61pOAHKxmNT4eGc%2FA%3D%3D\"}]}\r\ncf-ray: a2aa2be0eed50b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12044\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12044,"size_decoded":13117,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12044, version 1.0","md5":"8ce6c65055ab8837300ff5794b69c495","sha1":"6a85dfdc1291c9c44cde69fcfd2e07ca0d868af6","sha256":"2eae0d7e0715451a616b1f55e78c2bb1a1e2a47a59081915bfe78d0183e287cd","sha512":"5c5cff473992b00b7675797cf738c431055ac4aa7c4f6e73d1f3fc1bf80fa9d2a1ee1ffbc9590f5cb4042d26880278951eb970acb5bff6f694fa8ce92226fa08","ssdeep":"192:2V3+2zDfd44Lsn1UXznyB0Vuu2x/gKhTgqMFRY5xCJZ7bMbuZ7qkMP9sWlsZWU2:9ESUXzG3JBnhIUxGZf8uRY9sWlGB2","tlshash":"5142d01da5266c0dfb3372f0199b1809692740ae84e52cff6d321e9c974dc6364d9ebc","first_seen":"2023-04-05T14:15:33Z","last_seen":"2026-08-13T19:37:30.40989Z","times_seen":14,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddosnow.com/static/media/fa-solid-900.0f27e9b933cc50abbbba.woff2","fqdn":"ddosnow.com","domain":"ddosnow.com","tld":"com"},"ip":{"addr":"104.21.2.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ddosnow.com/login","date":"2026-08-13T19:36:55.194Z","timestamp":1786649815194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddosnow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 13:32:14 GMT","end":"Fri, 25 Sep 2026 13:32:13 GMT"},"fingerprint":{"sha1":"80:1C:AD:E8:0E:1C:92:78:BD:CA:02:82:EA:F0:DC:5A:9B:D5:3F:6B","sha256":"84:68:7E:1A:A7:90:48:5B:4D:CF:42:59:92:32:3C:41:38:E9:1E:F7:F8:F9:19:5C:46:56:B2:FF:E8:9B:B7:0B"}}},"request":{"raw":"GET /static/media/fa-solid-900.0f27e9b933cc50abbbba.woff2 HTTP/1.1\r\nHost: ddosnow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://ddosnow.com/static/css/main.ea2ba633.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: language=en; SESSION=jd72tsh1te98jdgciank6ll0d8; XSRF-TOKEN=d9ccf2d30616065130a6e70ad1792ec700bbf1ee; cf_clearance=mvnZIB0meENm79dKai1Qi4V79Sk7Ihc06j4Ztqf.j90-1786649814-1.2.1.1-nHNKGAm7WrRA60A.xkd.IEgZe2NFWpmqSjFuXUwtkWeCDHSRTcS.bqZS_iHCo1rDSTXEiGhveRqfC9ExCRCGyYBt1QEZUqyUHbHaYJaROXC6KeVRWUYemgtbqKrmUKb1p9HkGgLYRIRye8sQ9c6w94MNbWpT_q030Uy5Xb570_PIXIs4669QuHoB.D5wz0MkdmjwaLBitDEJxnKfi7Yv6OgsTt4YcJXkvvIMZ6uczL_aUOlFbNEhkAO2SM7Nw0YnmVrTrTmOsR3NtbGcOMqZfJgH4wef5TAL2SIB3m1mStz4C_vTRVe6NLAbh7227BISqpMKCKsEFnTXcG9oy5ohLrOHD72cQh3OveujpDvxb0E; _ga_SSGSR26KRK=GS2.1.s1786649815$o1$g0$t1786649815$j60$l0$h0; _ga=GA1.1.1299613355.1786649815\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:36:55 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 02:22:16 GMT\r\netag: \"6a52fa58-12958\"\r\nonion-location: http://mbxbw4lalgzhb2c24isv5tei5clkhgxj6umatlwqha3rqbrx5s3hehqd.onion/static/media/fa-solid-900.0f27e9b933cc50abbbba.woff2\r\naccept-ranges: bytes\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wjAR%2B9%2FpJOHJ6U%2F0ErUh7mzDr9d%2BuWZ5VsXPp1UClpRqOdRTnMVqwQsFnOfsSVIT7%2FMf5bRDXrelNb4mQYiXlIl0D1gU%2FGOV4J%2B0Vg1uOaFxp88ROmog9RMViD%2B%2B4Q%3D%3D\"}]}\r\ncf-ray: a2aa2be0fed60b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 76120\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76120,"size_decoded":77211,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76120, version 330.-16188","md5":"55eb2a60e8181f0e68b558c991973bf0","sha1":"af776f52d579da211590e0691d554b88a69dfe61","sha256":"2c3097237d60f42e800ebe4009c9af144bb19e5581e1c0501c7b259eee7e210c","sha512":"64036b3ea658d7f37dc9949dd73c68c3d929e298f9519388c479a802d380bbeb4d1827b846726442228db06a73c9188fe1af09a23fa388a68051d21fc5cdbfd6","ssdeep":"1536:kCRphZWtYYTUGxQsjuTdzmhLIG3HkbDInbsRw:kCThfG/juT4LIG3HODPw","tlshash":"f473029cdf1b184a911eb3224ca8e42c424016f54d6a37465266efddf043ef9bbbc644","first_seen":"2023-04-05T04:41:55Z","last_seen":"2026-08-13T21:45:07.242229Z","times_seen":12260,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"ddosnow.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}