{"report_id":"a3fe01c1-cf57-4592-84f5-1468c7f9136e","version":6,"status":"done","tags":[],"date":"2026-04-18T12:47:19Z","url":{"schema":"http","addr":"legitdogeminer.top","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":0,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"legitdogeminer.top/","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"title":"LegitDogeMiner - Dogecoin Cloud Mining","dom":{"size":56316,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5019)","md5":"e3a3992a5ca468ca6193d3c24666ec96","sha1":"b86f0efb55664dbdd9293f6098095945fb67637c","sha256":"723e22dd05098313127a056e1f0a4095b98b76e54bbfbb7273f420e1199b0906","sha512":"618346f8d54f64002dc7bd0b13a501839b7587fe23f411229960a696ee18f488ced52cceb696fb25db42613347ec422b4441075d00a23aa2b381d8e76f1a62ff","ssdeep":"768:m6QlPkcC8fseZGhnjIePdY3RiwEZSDmWoFbO/hR6DtMpm:w8cC8ShzW3YwHDmWoFbO/hR6DtMpm","tlshash":"f443e661a5f1b039b463ccc1abb52f1f3564d043c8464a24b3ae05e59feabe6ec5364c","dom_hash":"domhash8330ce5909c4dece1766c5e719caf5df","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"legitdogeminer.top","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":0,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-23T12:47:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"legitdogeminer.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"images.unsplash.com","ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-05-29","domain_rank":86676,"first_seen":"2015-08-06T06:03:25Z","last_seen":"2026-04-15T14:18:38.441181Z","alert_count":0,"request_count":1,"received_data":587,"sent_data":493,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":9791,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.coinpayments.net","ip":{"addr":"104.18.31.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-08-01","domain_rank":912536,"first_seen":"2013-09-13T09:53:01Z","last_seen":"2026-03-02T16:59:35.494588Z","alert_count":0,"request_count":3,"received_data":53671,"sent_data":1361,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"legitdogeminer.top","ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-04-14","domain_rank":0,"first_seen":"2026-04-18T12:47:21.3404Z","last_seen":"2026-04-18T12:47:21.3404Z","alert_count":13,"request_count":13,"received_data":503186,"sent_data":14806,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":4,"received_data":159852,"sent_data":2140,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-04-13T05:42:01.853159Z","alert_count":0,"request_count":2,"received_data":815983,"sent_data":828,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-12T22:35:46.689898Z","alert_count":0,"request_count":2,"received_data":49341,"sent_data":894,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"legitdogeminer.top/","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc1795b5a2fa4a5a1630b6b486fcb3af","sha1":"04805ec6de226445f5edd530866e54853f3389b2","sha256":"2b8545bf4a9d96c8483204f646d89ed3203ea71509b2ace5eb47aba153734710","sha512":"63d01270b8ab499cbdb3c367a1d4f7b9169f3027313a35af2387f617885a3ac66617ecb1a8977abce53b3fb285765bad1ef6b00e839c333102965b707c827906","ssdeep":"","tlshash":"32f0469b72ba0b3402e7e1393aee4b493132100b32498a497e3cd5405f95ed226e65dd","size":603,"data":"","first_seen":"2026-04-18T12:47:26.303311Z","last_seen":"2026-04-18T12:54:02.985556Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legitdogeminer.top/","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ddefcea6c92a31f519d0cfa18b0c5476","sha1":"f5491717a53002dc03609a2ddfb947f211361d81","sha256":"3e507360e8b75970b0416b522ca7036f5b4afcf1c32d53a0ab353ef8c9142465","sha512":"eb04e794b507ad8fcdf1a6450833acf42a2b44dd16e87209190f5bc198a33a22b83faf17cd3aafd0071f9b2bf2d89696ff379f7604d0711f0e98caeacdaa0bc3","ssdeep":"","tlshash":"c3f0f63e0acabab4a972b0d5d34f730838f530d548835420c43cc2557ca043bc2a58cb","size":539,"data":"","first_seen":"2026-04-18T12:47:26.304163Z","last_seen":"2026-04-18T12:47:26.304163Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@alpinejs/collapse@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c8363b44f4f4d55d36379db4a8d3e17","sha1":"d0a27f2df0ac59f5011e4a8fd71391343c65e772","sha256":"c7661d4e2cf0465e3cd693190debb5f592ac72dcc4cfe650581273767558b27b","sha512":"63fea6219e0920c6801a4b5ca40582c6e08efc2712148806394f9fadea2816a499e7cb45b315b82702954a1429ba2b01367afa7dfce43e465ce50e5113f05f52","ssdeep":"","tlshash":"893112f1730531b0e3ca6e77d889d65c913a9849634aa15cdf1a6c15080e4aefd1fbb1","size":1448,"data":"","first_seen":"2024-06-11T15:19:39Z","last_seen":"2026-04-26T07:35:48.799675Z","times_seen":664,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"10580ad0bc3ea7ac43d556702a16299f","sha1":"f84fe31960c098db1f541e63327043a2e864cb1f","sha256":"fc4d427083f4ce04bdfef5f0f7777887673c4ea791e332102df4f232175b0035","sha512":"da1f9fda5762332ac24402b8b25cdbe1fb537e6bb38bcd9553025c427ceaf826991f95ada669dcccdc893e1fa60fc1e5c892ab88f6e5c018d20a90903f065a8a","ssdeep":"","tlshash":"c7b09bc458c75900c2173591c035543761341661917e4465173de3949533116e15cc9d","size":128,"data":"","first_seen":"2023-04-12T18:09:08Z","last_seen":"2026-04-26T12:58:34.957901Z","times_seen":6093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"0cf5aa2b5776b2e06c03f99f3d1cbc61","sha1":"18151f49bf63e16fda5e54a024ae1a9f77a785f7","sha256":"bb3e13c10b24524f8afe91a15b40e93cd0b32c7f1909556e5d82be609fb0440a","sha512":"20fd2d449d444df081130e35a24aebd16650bd649539138e860fbe1e730a8f441c3b520b2481b5da1f59236d2187ee2d931ebfaf2f157aed6a1f6f9539efaa20","ssdeep":"","tlshash":"0ac09bc498c75900c25735d1c035543b61345661917e4865573de7d49533116e15cc9d","size":134,"data":"","first_seen":"2023-05-09T18:04:56Z","last_seen":"2026-04-26T07:27:35.225965Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legitdogeminer.top/assets/themes/frontend/default/vendors/@popperjs/popper.min.js","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"83e6ef063fa41ff8d8c00956a7cd3fd9","sha1":"8eeb7bf71e8a978b82a1a198015f14d73d2ea592","sha256":"5a07c69f9061eb12e39a031358a4f567f30a002ad6182639ac84fd1bda2f6e65","sha512":"dab363d8a27e0fcb3571e35ab1321ec7acf81d6c8e9c460b542dc58a018e9b240265cd9e0572a03b1426a37a0a2c7c9f723e77bb3e1032c44258d6cb777d90d6","ssdeep":"384:PDzk5KmEpLFd7tRwQZMVwAVfbsnmlHiBnjLU4MSV1Nn1awap1P9Vy8UuZHFh+L4O:NmERLwQZcFVLCBjg4MC1Nn1ip1P9Vy84","tlshash":"5d82c6cd3994f0a1167b52b6c07f550f73339561228ea410b255d6dd2c74ebba22bc3e","size":18594,"data":"","first_seen":"2023-03-07T12:03:09Z","last_seen":"2026-04-26T13:07:37.613878Z","times_seen":4706,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"ef089f58bda76fcc33654f10ea60480c","sha1":"9648039b975f75419e8abd664b422999ef2d6906","sha256":"32ca86163b511e050a5eea26a81f2495b0606c3da2707dea45d00b0e62f73aeb","sha512":"eed602abfa0cac3f6b27059710354ef4eacd4100abd70ad619fdb95f253e34ceb5d8981f06a2e4177f5ba949fec322d92caa21f5f292c0dc5297e35092809d51","ssdeep":"","tlshash":"42c02bc488c20900c3073590c039803731341260c07d44aa173ce3909833026e00ccdd","size":139,"data":"","first_seen":"2023-04-13T23:00:32Z","last_seen":"2026-04-26T11:16:12.425117Z","times_seen":3912,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legitdogeminer.top/assets/themes/frontend/default/vendors/bootstrap/bootstrap.min.js","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5730588db13e71c65bdb1d234089260","sha1":"282209ef6065e8451a5623c1b208d256d7b14c27","sha256":"77e1728245a0c2de7d0859163ee081e1113aa75fd6894602cb5eb0d7e739bca9","sha512":"10a596b3565c036658f656cb2123f3f1a191dbe2fb25562a040613ab90178019128d14ae4041aa5b1f11d73017d7a29d5cf6828ce09a284f0c0a9534c1c1e51c","ssdeep":"768:Gs1FOa1EatDEOyStIzhgAQD/BExN8TVO3cQodO6/2Vm7MTRAxmYIZ9tFepWOgdJK:G9i5G/M+ThF6n","tlshash":"9a43b45a3258b87309de44a68076470bf7255d94b047812cb9bdacee1b3dc8272b7f78","size":60091,"data":"","first_seen":"2023-03-07T12:10:18Z","last_seen":"2026-04-26T08:53:05.2908Z","times_seen":12497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fee1350daa0192000a042e84674d2004","sha1":"3d8682e2fff3ed5a73cddf935ad05ce41c1738ff","sha256":"beeba63d08956f64fa060f6b6a29c87a341bf069fb96c9459c222c6fd42e58ae","sha512":"4dd71bb815923b8b90fa60251c89b3fedad8665a12cdadc34c5c9ca8be536829a051da1da5616f4e60aa7a950e488a0b574ed053117a3d3e4a74d6030f52dbb5","ssdeep":"768:DBCz6escmy5dIOT2E3KBdoqCHL6POK/5IKYqLWoOAUORrST5yUGz++u3hrpShpJg:FCuei1EqCr6POQDYmWomUVzMrpShpJyf","tlshash":"e723f9e97396b13283ef01b190bb424af33d2994150e5464f669d8ee383948d51f3fba","size":46347,"data":"","first_seen":"2026-04-02T23:56:24.526238Z","last_seen":"2026-04-26T13:30:13.238445Z","times_seen":649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legitdogeminer.top/livewire/livewire.js?id=5cdaa3ec393c09829366","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cdaa3ec393c098293666a1a69eeb311","sha1":"45e20c4a2ad11fdbe6507b3aa731b340826a2669","sha256":"90b371dcd1e5e1455b51c7b0759945859cf1228340f7a5900cd44c1b7ed66c55","sha512":"4bb3dc34851904ed56f5a6d89f4a00352eadd3e0cc801ca9aa45936cdcbb1d410a72e2628493ebcf34f4f203c2ffe4222d65b3ccd65141fe6254ab74b0f97122","ssdeep":"1536:bFWbBs025VQpotIfUoeR9g6qpvWuPkbEyVnw7lxCGuIHIYMx0suDbk/5UK0t6fZm:5KyLBtuU4DpvVZfjuIHIYhvt6FEOySW","tlshash":"e3f33b99b6c1f1b248c77164643f3a0fb2762054589d9090fa79cec07eba948522bf7f","size":159027,"data":"","first_seen":"2023-03-07T12:27:00Z","last_seen":"2026-04-26T07:02:45.0773Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-26T12:56:35.537119Z","times_seen":31503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"40eb0c30ef592f7403c033be71ac40a8","sha1":"66b8f7eeaeec7d8686fef51b0605d61a09db889d","sha256":"3a9faf5ba5af95f0200f47d506bdad0df943299e87396b973fa87c88183463df","sha512":"6997d7dac3b7f20670d1418237bf9ec6c09f069fc5e96f706bb1add22869662abcae68c628510550255496ecab3d5072f465eeabdcb50b64e74c9aad9f05df1b","ssdeep":"","tlshash":"20c09bc45cc75910d21735d1c037553b61346661917d4465573da3949533116e15ccdd","size":134,"data":"","first_seen":"2023-04-27T01:00:11Z","last_seen":"2026-04-26T07:36:45.11124Z","times_seen":354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"2d06177c6233c92302d7ae52a431ffa5","sha1":"eec8bd413f439f9d455e6646e4daa56b6301f87c","sha256":"f23431bb4b025df0ac2be615d518e2727bea1ba93c895d15986e3a696c891bb0","sha512":"9e2f239c7522d4f262e21ea55b381203a02475f93bd7bef74cd7b714a6acb7de4665200b2170361ef724962f7a71ffc803580b1d5c4f2f9d520f8de0e9053300","ssdeep":"","tlshash":"4db09bc458c65900c3533591c035543b61345661917e4875173de7949533156d15cc9d","size":129,"data":"","first_seen":"2023-05-09T18:04:55Z","last_seen":"2026-04-26T07:36:45.110763Z","times_seen":1027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legitdogeminer.top/","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"200457514136defca31284b62f1b80c7","sha1":"3bd74185a7554f5e09d62b8428e5ef414231a1d0","sha256":"091c53a977783be79d4612bcfdb8dd28e998524495ea2bf8676603f083e6e632","sha512":"c11c21478d37b42213808e63b9529cf367b59dc963788dd91cd3c000ed4acd298697749324bbb25ecc4bed1d8a43f7639d1bc4ec37d90a1a00733b780762af1d","ssdeep":"","tlshash":"0fe02b8e7dbd20af403b6167994303053b39004a348a9d137ebc61ca4fa597c6de0ee5","size":295,"data":"","first_seen":"2026-04-18T12:47:26.320671Z","last_seen":"2026-04-18T12:54:02.988576Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 18 Apr 2026 12:46:59 GMT\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9105,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8390016b02340df24394a116b64af7d8","sha1":"ec52d1ebea1499e6da034c701baf34a9879d5510","sha256":"c49904540ddf6ad040c6ac02749e6e85eda721feecc312edb791583ea5ffb71a","sha512":"f3a5042d493ba81ec77c7410d9725601f3757e03e809ebcca1b6c99a981e034fe62b46ccb18936fdeca7fa73a6cf1c1e6d013f6f30a00c0ad27fe74e77fb496d","ssdeep":"192:OH+yptkUkH0yXLkeLHbywkkdiHyy1RkoRHhyWikvH:il6DPe9hjcq","tlshash":"e4127891045bd400aa432cc667cf7e36ed4e62113454c57aebfd9898ecabd272264b1e","first_seen":"2025-09-17T07:38:58.084974Z","last_seen":"2026-04-26T13:26:58.375323Z","times_seen":106,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":155,"dns":4,"connect":9,"send":0,"wait":20,"receive":0,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinpayments.net/images/coins/LTC.png","fqdn":"www.coinpayments.net","domain":"coinpayments.net","tld":"net"},"ip":{"addr":"104.18.31.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinpayments.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 14:30:24 GMT","end":"Sun, 14 Jun 2026 14:30:23 GMT"},"fingerprint":{"sha1":"43:8C:5F:15:0D:B1:35:96:06:2E:72:B1:CB:EB:63:04:48:1D:7B:F7","sha256":"C4:F5:43:1A:06:D5:35:0C:7C:AA:21:52:77:45:B3:25:BF:8B:55:2E:1C:4C:77:17:EA:7B:65:4E:68:C2:26:6B"}}},"request":{"raw":"GET /images/coins/LTC.png HTTP/1.1\r\nHost: www.coinpayments.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 35051\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Mar 2022 17:29:52 GMT\r\netag: \"88eb-5db4aa8fad171\"\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=bXtdZWufPlyxM4w1WJFuNhcyjFk6yfqJP6GRIXUMRvA-1776516419.2785144-1.0.1.1-1n1XLNKnBSLiQN_qDIpbA4b93DTwIRv8.u76_rY4_kFd8qjfI32LLK084ZjbO4EQv9kr4CgqdNipbVmCpv7i8b7ObfKybZRxDMoUUrkDZSfVVGLpY1IO10A1elEOMZ0X; HttpOnly; Secure; Path=/; Domain=coinpayments.net; Expires=Sat, 18 Apr 2026 13:16:59 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 18 Apr 2026 16:46:59 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9ee3c684783a76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35051,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit gray+alpha, non-interlaced","md5":"d77aee66e3eb28bc6c80604d603c84e4","sha1":"9c1582c899d72762dc5e3b733cbc1626d6a9d293","sha256":"b1ca1d2ef0811aef16ec779b8ee77424c5c71379c3f0b7cd5bca245c3f230d28","sha512":"ef79b3c82bf3059f03e0fc8a97e65e4d0a2c138e78b4f1e2e8f843f5853969ce4e634eec203287109412c8295b46ba377b062571d4408b43aa5274a6fdfd90ac","ssdeep":"768:KfFSs5AZzkRDdX9b7R3wp4c6H6da482ZVCzPWJiSt0lKAOHhGQXM:IAxkpXZ6ppda482ZwzPxXTOHhRXM","tlshash":"0bf2e2970e21590b3c277b5704809d58af01a694f5b8c8ecdf2de2f9e548f9c28ac959","first_seen":"2023-11-04T10:00:50Z","last_seen":"2026-04-18T12:54:02.97845Z","times_seen":8,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":128,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legitdogeminer.top/livewire/livewire.js?id=5cdaa3ec393c09829366","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.legitdogeminer.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 12:02:58 GMT","end":"Mon, 13 Jul 2026 12:02:57 GMT"},"fingerprint":{"sha1":"0E:90:D0:F7:5D:44:A9:8C:27:BB:F2:51:A3:8E:0E:DF:B6:EC:72:14","sha256":"AC:BB:7B:2A:58:51:FD:CE:3C:42:3D:16:DC:9F:9D:77:97:C1:41:82:E9:D3:C0:86:53:82:3F:06:95:57:AA:28"}}},"request":{"raw":"GET /livewire/livewire.js?id=5cdaa3ec393c09829366 HTTP/1.1\r\nHost: legitdogeminer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjBsQ091bXk5WHN0T0xlYklkbnVQTWc9PSIsInZhbHVlIjoiKzJzN0FvbFJTd2p2QUorYVNCSEdRNXJEbnBiY3NMYVIxUi9VT1hQZnJ0cEdkVFdoaWI3b0c2UjJQdmRuVDZLaEt2ay96ZU10U25qOTFJSzcrK0xVSUViUVMwZ0piRGtESHdYM25tNjJYUUZKNjU2Rlc3clhxUlZTdmFOY0hzUG8iLCJtYWMiOiIyNTA4OTJhOTFmMDQ1ZDVhNWIxNGY3MDk4NjRmNTZjNmRlNGI4ZGQ2M2JhZTQzMTRkOTk0MDUxNWZjMjM1M2Q5IiwidGFnIjoiIn0%3D; legitdogeminer_session=eyJpdiI6IkNFeUl2aTFyNmhpNmFzTWZWSTFpd3c9PSIsInZhbHVlIjoiQ1JoMjZsRE5oMWhpaWNJdUdHYjRZM2kwYzhtVW5yU1g1ZGdDbGRuK21NUGRrTG5ra0hlK2tqU1ZHMGRML2MxNi9uMWh0dmkxUkxKQ0hFbms1N2dKdzZuNERMM1NxTkpwK0JVQUJzQkovSjJCVEVHZUx3L0x4ZThLMVVVZm5OYTMiLCJtYWMiOiJlZGUxODBiZDM1ZTBmZDRmZjU1YjZhMjI1NTUzMmZmZDFkODdjNDlmNTMwZTA5NDY4NzMyNGU1N2IxMjBhZjk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/7.4.33\r\ncontent-type: application/javascript; charset=utf-8\r\nexpires: Sun, 18 Apr 2027 12:46:59 GMT\r\ncache-control: max-age=31536000, public\r\nlast-modified: Wed, 20 Oct 2021 07:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":159027,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54461)","md5":"5cdaa3ec393c098293666a1a69eeb311","sha1":"45e20c4a2ad11fdbe6507b3aa731b340826a2669","sha256":"90b371dcd1e5e1455b51c7b0759945859cf1228340f7a5900cd44c1b7ed66c55","sha512":"4bb3dc34851904ed56f5a6d89f4a00352eadd3e0cc801ca9aa45936cdcbb1d410a72e2628493ebcf34f4f203c2ffe4222d65b3ccd65141fe6254ab74b0f97122","ssdeep":"1536:bFWbBs025VQpotIfUoeR9g6qpvWuPkbEyVnw7lxCGuIHIYMx0suDbk/5UK0t6fZm:5KyLBtuU4DpvVZfjuIHIYhvt6FEOySW","tlshash":"e3f33b99b6c1f1b248c77164643f3a0fb2762054589d9090fa79cec07eba948522bf7f","first_seen":"2023-03-07T12:27:00Z","last_seen":"2026-04-26T07:02:45.0773Z","times_seen":58,"resource_available":true,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"legitdogeminer.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legitdogeminer.top/alialoula/cryptologos/DOGE.svg","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:47:00.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.legitdogeminer.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 12:02:58 GMT","end":"Mon, 13 Jul 2026 12:02:57 GMT"},"fingerprint":{"sha1":"0E:90:D0:F7:5D:44:A9:8C:27:BB:F2:51:A3:8E:0E:DF:B6:EC:72:14","sha256":"AC:BB:7B:2A:58:51:FD:CE:3C:42:3D:16:DC:9F:9D:77:97:C1:41:82:E9:D3:C0:86:53:82:3F:06:95:57:AA:28"}}},"request":{"raw":"GET /alialoula/cryptologos/DOGE.svg HTTP/1.1\r\nHost: legitdogeminer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjBsQ091bXk5WHN0T0xlYklkbnVQTWc9PSIsInZhbHVlIjoiKzJzN0FvbFJTd2p2QUorYVNCSEdRNXJEbnBiY3NMYVIxUi9VT1hQZnJ0cEdkVFdoaWI3b0c2UjJQdmRuVDZLaEt2ay96ZU10U25qOTFJSzcrK0xVSUViUVMwZ0piRGtESHdYM25tNjJYUUZKNjU2Rlc3clhxUlZTdmFOY0hzUG8iLCJtYWMiOiIyNTA4OTJhOTFmMDQ1ZDVhNWIxNGY3MDk4NjRmNTZjNmRlNGI4ZGQ2M2JhZTQzMTRkOTk0MDUxNWZjMjM1M2Q5IiwidGFnIjoiIn0%3D; legitdogeminer_session=eyJpdiI6IkNFeUl2aTFyNmhpNmFzTWZWSTFpd3c9PSIsInZhbHVlIjoiQ1JoMjZsRE5oMWhpaWNJdUdHYjRZM2kwYzhtVW5yU1g1ZGdDbGRuK21NUGRrTG5ra0hlK2tqU1ZHMGRML2MxNi9uMWh0dmkxUkxKQ0hFbms1N2dKdzZuNERMM1NxTkpwK0JVQUJzQkovSjJCVEVHZUx3L0x4ZThLMVVVZm5OYTMiLCJtYWMiOiJlZGUxODBiZDM1ZTBmZDRmZjU1YjZhMjI1NTUzMmZmZDFkODdjNDlmNTMwZTA5NDY4NzMyNGU1N2IxMjBhZjk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 25 Apr 2026 12:47:00 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 12 Mar 2026 03:39:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 35640\r\ndate: Sat, 18 Apr 2026 12:47:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95603,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01579acf934e7c997844695074a23c97","sha1":"4323f558ba562b47456c78b51357ef8befbf68d2","sha256":"e90a01b7147bb0691b6e6b6490220fc306e436bf3b86c8ed5e7c27f654daff1c","sha512":"b7f1a66ccc2200a31ccdb3b1392a01610a700be514a645aedafe28c9dcc725bc20f7e14997f638b6f47ab6a994e40ddf61f38da07491394eadaff3f6842bd27d","ssdeep":"768:y/b+kCoUDEiM5D/gwZVXEsxlTPJevAXcI7jcQOEPNUz+nB4hmVq59250VHWWpLp3:4apw7XUvAsDEPNkeBxgWGWlCZdT8EkZI","tlshash":"079365f6a3d4b2d0e546e7f4c62a95b53a7738fe3b25cb5803e46d94ea0116d848ccc1","first_seen":"2026-04-18T12:47:26.289109Z","last_seen":"2026-04-18T12:54:02.946626Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"legitdogeminer.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legitdogeminer.top/alialoula/cryptologos/ETH.svg","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.legitdogeminer.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 12:02:58 GMT","end":"Mon, 13 Jul 2026 12:02:57 GMT"},"fingerprint":{"sha1":"0E:90:D0:F7:5D:44:A9:8C:27:BB:F2:51:A3:8E:0E:DF:B6:EC:72:14","sha256":"AC:BB:7B:2A:58:51:FD:CE:3C:42:3D:16:DC:9F:9D:77:97:C1:41:82:E9:D3:C0:86:53:82:3F:06:95:57:AA:28"}}},"request":{"raw":"GET /alialoula/cryptologos/ETH.svg HTTP/1.1\r\nHost: legitdogeminer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjBsQ091bXk5WHN0T0xlYklkbnVQTWc9PSIsInZhbHVlIjoiKzJzN0FvbFJTd2p2QUorYVNCSEdRNXJEbnBiY3NMYVIxUi9VT1hQZnJ0cEdkVFdoaWI3b0c2UjJQdmRuVDZLaEt2ay96ZU10U25qOTFJSzcrK0xVSUViUVMwZ0piRGtESHdYM25tNjJYUUZKNjU2Rlc3clhxUlZTdmFOY0hzUG8iLCJtYWMiOiIyNTA4OTJhOTFmMDQ1ZDVhNWIxNGY3MDk4NjRmNTZjNmRlNGI4ZGQ2M2JhZTQzMTRkOTk0MDUxNWZjMjM1M2Q5IiwidGFnIjoiIn0%3D; legitdogeminer_session=eyJpdiI6IkNFeUl2aTFyNmhpNmFzTWZWSTFpd3c9PSIsInZhbHVlIjoiQ1JoMjZsRE5oMWhpaWNJdUdHYjRZM2kwYzhtVW5yU1g1ZGdDbGRuK21NUGRrTG5ra0hlK2tqU1ZHMGRML2MxNi9uMWh0dmkxUkxKQ0hFbms1N2dKdzZuNERMM1NxTkpwK0JVQUJzQkovSjJCVEVHZUx3L0x4ZThLMVVVZm5OYTMiLCJtYWMiOiJlZGUxODBiZDM1ZTBmZDRmZjU1YjZhMjI1NTUzMmZmZDFkODdjNDlmNTMwZTA5NDY4NzMyNGU1N2IxMjBhZjk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 25 Apr 2026 12:46:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 12 Mar 2026 03:38:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 355\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":871,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6faa99b217b053a18b73a9254133e6b4","sha1":"f1c8e3e33e4257a6291006cf6260cb16d7931df8","sha256":"847793ab3f1da79ef2b7dedd68ed71e38099a73f2ae468569b3f73be37b75799","sha512":"d38bc1684fbde255ab0c1e15d4c152c7ecceb2d10617128c6d2a51d9648c41745f138c55149d7543efd51dbbc8de03588db69692f0f51e2e1c56681ab1e33964","ssdeep":"","tlshash":"7211abf232ccc856d901b7410ab97c3308b2abc5813b8c89a56536166a7a3df0e5c6e7","first_seen":"2026-04-18T12:47:26.29009Z","last_seen":"2026-04-18T12:54:02.93279Z","times_seen":2,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"legitdogeminer.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinpayments.net/images/coins/USDT.png","fqdn":"www.coinpayments.net","domain":"coinpayments.net","tld":"net"},"ip":{"addr":"104.18.31.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinpayments.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 14:30:24 GMT","end":"Sun, 14 Jun 2026 14:30:23 GMT"},"fingerprint":{"sha1":"43:8C:5F:15:0D:B1:35:96:06:2E:72:B1:CB:EB:63:04:48:1D:7B:F7","sha256":"C4:F5:43:1A:06:D5:35:0C:7C:AA:21:52:77:45:B3:25:BF:8B:55:2E:1C:4C:77:17:EA:7B:65:4E:68:C2:26:6B"}}},"request":{"raw":"GET /images/coins/USDT.png HTTP/1.1\r\nHost: www.coinpayments.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 7545\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Mar 2022 17:29:52 GMT\r\netag: \"1d79-5db4aa8fb1f91\"\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=RegMIqzzF0pyixucrgJwB6esUSlzwXVzwj0gB2e4Iv4-1776516419.28058-1.0.1.1-hIOpeW3GV8ixldDa9v1rP4KRiLE0JRRfajSnxAbDiy9q5o8xRN5VF.5p.4taMHw75YNleIZjcYUD0UbK14lvoxmuvkYswpwagdBucEjVviiw1.gE6Eze3.JE8UUxBVsk; HttpOnly; Secure; Path=/; Domain=coinpayments.net; Expires=Sat, 18 Apr 2026 13:16:59 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 6463\r\nexpires: Sat, 18 Apr 2026 16:46:59 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9ee3c684884676ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7545,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"0999e5071bc0348f64a88fb78f0b1534","sha1":"27aac841802e3eed43eed323cf154326e293a964","sha256":"a1a1b04e0ee083a22ec046dd4e5a4776cc18600294a8921c57c047d2f84ae01d","sha512":"862fb2d3d4647364b7d332c6bccc88e23089164919ec54b97067e5be6f589fa4a67cfaea12b12cdc875de4a638671e06216cce212d418d9b537ac96013e13663","ssdeep":"192:uFlP1q9shUSJnjhnxU8pDmMf6vFAanPLMDyF:uFzqubTxU8tmMmLPAc","tlshash":"adf1af5521331d7bba6621c753fe890865f5ffed4a0d41b0a3e40e82221c69f6133758","first_seen":"2023-10-13T11:14:41Z","last_seen":"2026-04-18T12:54:02.976313Z","times_seen":8,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:47:00.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://legitdogeminer.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 08:16:42 GMT\r\nexpires: Fri, 16 Apr 2027 08:16:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 189018\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-04-26T13:07:52.299829Z","times_seen":21860,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":65,"dns":1,"connect":7,"send":0,"wait":9,"receive":9,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legitdogeminer.top/","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T12:46:57.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.legitdogeminer.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 12:02:58 GMT","end":"Mon, 13 Jul 2026 12:02:57 GMT"},"fingerprint":{"sha1":"0E:90:D0:F7:5D:44:A9:8C:27:BB:F2:51:A3:8E:0E:DF:B6:EC:72:14","sha256":"AC:BB:7B:2A:58:51:FD:CE:3C:42:3D:16:DC:9F:9D:77:97:C1:41:82:E9:D3:C0:86:53:82:3F:06:95:57:AA:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: legitdogeminer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/7.4.33\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: max-age=0, must-revalidate, no-cache, no-store, private\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjBsQ091bXk5WHN0T0xlYklkbnVQTWc9PSIsInZhbHVlIjoiKzJzN0FvbFJTd2p2QUorYVNCSEdRNXJEbnBiY3NMYVIxUi9VT1hQZnJ0cEdkVFdoaWI3b0c2UjJQdmRuVDZLaEt2ay96ZU10U25qOTFJSzcrK0xVSUViUVMwZ0piRGtESHdYM25tNjJYUUZKNjU2Rlc3clhxUlZTdmFOY0hzUG8iLCJtYWMiOiIyNTA4OTJhOTFmMDQ1ZDVhNWIxNGY3MDk4NjRmNTZjNmRlNGI4ZGQ2M2JhZTQzMTRkOTk0MDUxNWZjMjM1M2Q5IiwidGFnIjoiIn0%3D; expires=Sat, 18-Apr-2026 14:46:58 GMT; Max-Age=7200; path=/; samesite=lax; secure\nlegitdogeminer_session=eyJpdiI6IkNFeUl2aTFyNmhpNmFzTWZWSTFpd3c9PSIsInZhbHVlIjoiQ1JoMjZsRE5oMWhpaWNJdUdHYjRZM2kwYzhtVW5yU1g1ZGdDbGRuK21NUGRrTG5ra0hlK2tqU1ZHMGRML2MxNi9uMWh0dmkxUkxKQ0hFbms1N2dKdzZuNERMM1NxTkpwK0JVQUJzQkovSjJCVEVHZUx3L0x4ZThLMVVVZm5OYTMiLCJtYWMiOiJlZGUxODBiZDM1ZTBmZDRmZjU1YjZhMjI1NTUzMmZmZDFkODdjNDlmNTMwZTA5NDY4NzMyNGU1N2IxMjBhZjk3IiwidGFnIjoiIn0%3D; expires=Sat, 18-Apr-2026 14:46:58 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Apr 2026 12:46:58 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]}],"data":{"size":52202,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (733)","md5":"bdf03cbf181417d48fd105071eb2731f","sha1":"33fa459c3de1d6cc21eac47164656e39dcd0621b","sha256":"448229b9a810cff3e9ec08384d8f1faffd9aca27a31543aff02b324f4e9e022b","sha512":"1ee7e0d704bcf682a84a449db3961b270f5cbe3970c9ae4dfd229fd7be3a0dcb8d6dbca13170edebdb6c8afedb21af3032337121da5da632fc79e95af19a2644","ssdeep":"768:vBZlDkcC8fseZKIYXPdHhiYQtZZSDD4QNheSppM1dXp2:tAcC8e9hgt+DD4QNheSppM1dXp2","tlshash":"6833b661a5f5b1396063cc91ab756f1f36a4d003c8460b24b3ae05e58feafe6ec5364c","first_seen":"2026-04-18T12:47:26.292908Z","last_seen":"2026-04-18T12:47:26.292908Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1241,"timings":{"blocked":295,"dns":95,"connect":90,"send":0,"wait":646,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"legitdogeminer.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::sqt8m-1776515707002-39144907fe65\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 712\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=afnCSXYClSSTFM8kXuIwOmASs7m%2Bz8mZ5Ymzk9VH33Ieldpgs42KYRVzkZMCxPxc73dR9oen1TnvkuutoC4MI7WF7Mx84jc3FLx0Kpza65e3hd%2Bb19vAkaAmxnOtfdnldCfVO2Y%3D\"}]}\r\ncf-ray: 9ee3c6846c225ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T13:08:22.12078Z","times_seen":14228674,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":35,"dns":1,"connect":1,"send":0,"wait":6,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legitdogeminer.top/alialoula/cryptologos/XRP.svg","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.legitdogeminer.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 12:02:58 GMT","end":"Mon, 13 Jul 2026 12:02:57 GMT"},"fingerprint":{"sha1":"0E:90:D0:F7:5D:44:A9:8C:27:BB:F2:51:A3:8E:0E:DF:B6:EC:72:14","sha256":"AC:BB:7B:2A:58:51:FD:CE:3C:42:3D:16:DC:9F:9D:77:97:C1:41:82:E9:D3:C0:86:53:82:3F:06:95:57:AA:28"}}},"request":{"raw":"GET /alialoula/cryptologos/XRP.svg HTTP/1.1\r\nHost: legitdogeminer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjBsQ091bXk5WHN0T0xlYklkbnVQTWc9PSIsInZhbHVlIjoiKzJzN0FvbFJTd2p2QUorYVNCSEdRNXJEbnBiY3NMYVIxUi9VT1hQZnJ0cEdkVFdoaWI3b0c2UjJQdmRuVDZLaEt2ay96ZU10U25qOTFJSzcrK0xVSUViUVMwZ0piRGtESHdYM25tNjJYUUZKNjU2Rlc3clhxUlZTdmFOY0hzUG8iLCJtYWMiOiIyNTA4OTJhOTFmMDQ1ZDVhNWIxNGY3MDk4NjRmNTZjNmRlNGI4ZGQ2M2JhZTQzMTRkOTk0MDUxNWZjMjM1M2Q5IiwidGFnIjoiIn0%3D; legitdogeminer_session=eyJpdiI6IkNFeUl2aTFyNmhpNmFzTWZWSTFpd3c9PSIsInZhbHVlIjoiQ1JoMjZsRE5oMWhpaWNJdUdHYjRZM2kwYzhtVW5yU1g1ZGdDbGRuK21NUGRrTG5ra0hlK2tqU1ZHMGRML2MxNi9uMWh0dmkxUkxKQ0hFbms1N2dKdzZuNERMM1NxTkpwK0JVQUJzQkovSjJCVEVHZUx3L0x4ZThLMVVVZm5OYTMiLCJtYWMiOiJlZGUxODBiZDM1ZTBmZDRmZjU1YjZhMjI1NTUzMmZmZDFkODdjNDlmNTMwZTA5NDY4NzMyNGU1N2IxMjBhZjk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 25 Apr 2026 12:46:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 12 Mar 2026 03:39:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5231\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7085,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a2b4cfafc6d546c7ccf0078ee74492f5","sha1":"8b7589cf5d9ed84e3b2271721f93a2c768000b67","sha256":"f5e3beecddf3deb7c1632af18621d17c0cd99acd5863009203a599bee804a24c","sha512":"b9e508deaf35df00a19bdab0d394c4af5c559424b845895ba11ee916dd942610636e7b609dff435f7b673688052f53bde9c2bd53868201cb5cde0ddc9943b34c","ssdeep":"96:Oh37xRb2BKHhLJqJV0yoA5MiPkgFglLrdr+9z86FaujMCRg7i6GObnKrih7jP8:zKVq590H084FRqvGOb/g","tlshash":"7ce18e31a019587ff0894db4480ef45c9c2b8447e33694eaf6ad90fb6b98519d50ed6c","first_seen":"2026-04-18T12:47:26.294331Z","last_seen":"2026-04-18T12:54:02.974245Z","times_seen":2,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"legitdogeminer.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinpayments.net/images/coins/DOGE.png","fqdn":"www.coinpayments.net","domain":"coinpayments.net","tld":"net"},"ip":{"addr":"104.18.31.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinpayments.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 14:30:24 GMT","end":"Sun, 14 Jun 2026 14:30:23 GMT"},"fingerprint":{"sha1":"43:8C:5F:15:0D:B1:35:96:06:2E:72:B1:CB:EB:63:04:48:1D:7B:F7","sha256":"C4:F5:43:1A:06:D5:35:0C:7C:AA:21:52:77:45:B3:25:BF:8B:55:2E:1C:4C:77:17:EA:7B:65:4E:68:C2:26:6B"}}},"request":{"raw":"GET /images/coins/DOGE.png HTTP/1.1\r\nHost: www.coinpayments.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 8717\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Mar 2022 17:29:52 GMT\r\netag: \"220d-5db4aa8faa291\"\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=BZhZA7hGpOexuZBOxnaAVMwEhfzuS_8uCbtzYsD4aso-1776516419.2781057-1.0.1.1-IGY7jruzHgSxm1Oy479qPmXdQWC43.59ifCY8Zr9VaxYgxL8GLZdV5hcJGbqyjDEOkV8PEPaVLKoEWxMe_yS_Ucf7k5XcNffAV6AMRRynkKOWB7UlAwQ2TVb8G8V02sg; HttpOnly; Secure; Path=/; Domain=coinpayments.net; Expires=Sat, 18 Apr 2026 13:16:59 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 18 Apr 2026 16:46:59 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9ee3c684783776ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8717,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"17c82f9553e44f80bf489eb4f00cd21d","sha1":"24bc21e6ae3705ab1f38fec68d30f41d40725841","sha256":"e6c61ff17419bddc3998402db7e3ff59291ecbb2facbebfb9581ecd53812604f","sha512":"b1dc4012df193d51d8c45f740fcd419874edb0be69bbe7e56e1d84b63401099ccb270670a169488a02c11ab5c0477985d50634c761a11815bee4769a1f05679c","ssdeep":"192:tF8zaZWs+bNt+fg3tkpPDGkGvIC72l5liWEaCaXyyJoRB:t+cWHBtPOtGjAC7mliWjC+yyJoRB","tlshash":"05029ecab8b01f10c969f0901af6be33f5855cd145a2fb68ca1f582e2120663ebe44c7","first_seen":"2023-11-04T10:00:50Z","last_seen":"2026-04-18T12:54:02.935586Z","times_seen":9,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":33,"dns":15,"connect":5,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legitdogeminer.top/assets/themes/frontend/default/vendors/@popperjs/popper.min.js","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.legitdogeminer.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 12:02:58 GMT","end":"Mon, 13 Jul 2026 12:02:57 GMT"},"fingerprint":{"sha1":"0E:90:D0:F7:5D:44:A9:8C:27:BB:F2:51:A3:8E:0E:DF:B6:EC:72:14","sha256":"AC:BB:7B:2A:58:51:FD:CE:3C:42:3D:16:DC:9F:9D:77:97:C1:41:82:E9:D3:C0:86:53:82:3F:06:95:57:AA:28"}}},"request":{"raw":"GET /assets/themes/frontend/default/vendors/@popperjs/popper.min.js HTTP/1.1\r\nHost: legitdogeminer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjBsQ091bXk5WHN0T0xlYklkbnVQTWc9PSIsInZhbHVlIjoiKzJzN0FvbFJTd2p2QUorYVNCSEdRNXJEbnBiY3NMYVIxUi9VT1hQZnJ0cEdkVFdoaWI3b0c2UjJQdmRuVDZLaEt2ay96ZU10U25qOTFJSzcrK0xVSUViUVMwZ0piRGtESHdYM25tNjJYUUZKNjU2Rlc3clhxUlZTdmFOY0hzUG8iLCJtYWMiOiIyNTA4OTJhOTFmMDQ1ZDVhNWIxNGY3MDk4NjRmNTZjNmRlNGI4ZGQ2M2JhZTQzMTRkOTk0MDUxNWZjMjM1M2Q5IiwidGFnIjoiIn0%3D; legitdogeminer_session=eyJpdiI6IkNFeUl2aTFyNmhpNmFzTWZWSTFpd3c9PSIsInZhbHVlIjoiQ1JoMjZsRE5oMWhpaWNJdUdHYjRZM2kwYzhtVW5yU1g1ZGdDbGRuK21NUGRrTG5ra0hlK2tqU1ZHMGRML2MxNi9uMWh0dmkxUkxKQ0hFbms1N2dKdzZuNERMM1NxTkpwK0JVQUJzQkovSjJCVEVHZUx3L0x4ZThLMVVVZm5OYTMiLCJtYWMiOiJlZGUxODBiZDM1ZTBmZDRmZjU1YjZhMjI1NTUzMmZmZDFkODdjNDlmNTMwZTA5NDY4NzMyNGU1N2IxMjBhZjk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 17 Jul 2021 19:27:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6434\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18594,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18506)","md5":"83e6ef063fa41ff8d8c00956a7cd3fd9","sha1":"8eeb7bf71e8a978b82a1a198015f14d73d2ea592","sha256":"5a07c69f9061eb12e39a031358a4f567f30a002ad6182639ac84fd1bda2f6e65","sha512":"dab363d8a27e0fcb3571e35ab1321ec7acf81d6c8e9c460b542dc58a018e9b240265cd9e0572a03b1426a37a0a2c7c9f723e77bb3e1032c44258d6cb777d90d6","ssdeep":"384:PDzk5KmEpLFd7tRwQZMVwAVfbsnmlHiBnjLU4MSV1Nn1awap1P9Vy8UuZHFh+L4O:NmERLwQZcFVLCBjg4MC1Nn1ip1P9Vy84","tlshash":"5d82c6cd3994f0a1167b52b6c07f550f73339561228ea410b255d6dd2c74ebba22bc3e","first_seen":"2023-03-07T12:03:09Z","last_seen":"2026-04-26T13:07:37.613878Z","times_seen":4706,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"legitdogeminer.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://legitdogeminer.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::md8nh-1775101186152-d45e2b42ab64\r\nlast-modified: Thu, 02 Apr 2026 03:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1415232\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HdpqcjdVGY4Yj8jvoH8oDiSEhzs8fB9Y5KjsAPOTl3ZgWFawnDUQgLtPq4I964UkYVQyIE8%2BGtZunbiBAzQCNArCGCI0srkhh2yuZ7V8jRe1m1ztq%2F4lY9v1wo71Ihk9dWhRLT0%3D\"}]}\r\ncf-ray: 9ee3c6855e515ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-26T12:56:35.537119Z","times_seen":31503,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legitdogeminer.top/alialoula/cryptologos/LTC.svg","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.legitdogeminer.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 12:02:58 GMT","end":"Mon, 13 Jul 2026 12:02:57 GMT"},"fingerprint":{"sha1":"0E:90:D0:F7:5D:44:A9:8C:27:BB:F2:51:A3:8E:0E:DF:B6:EC:72:14","sha256":"AC:BB:7B:2A:58:51:FD:CE:3C:42:3D:16:DC:9F:9D:77:97:C1:41:82:E9:D3:C0:86:53:82:3F:06:95:57:AA:28"}}},"request":{"raw":"GET /alialoula/cryptologos/LTC.svg HTTP/1.1\r\nHost: legitdogeminer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjBsQ091bXk5WHN0T0xlYklkbnVQTWc9PSIsInZhbHVlIjoiKzJzN0FvbFJTd2p2QUorYVNCSEdRNXJEbnBiY3NMYVIxUi9VT1hQZnJ0cEdkVFdoaWI3b0c2UjJQdmRuVDZLaEt2ay96ZU10U25qOTFJSzcrK0xVSUViUVMwZ0piRGtESHdYM25tNjJYUUZKNjU2Rlc3clhxUlZTdmFOY0hzUG8iLCJtYWMiOiIyNTA4OTJhOTFmMDQ1ZDVhNWIxNGY3MDk4NjRmNTZjNmRlNGI4ZGQ2M2JhZTQzMTRkOTk0MDUxNWZjMjM1M2Q5IiwidGFnIjoiIn0%3D; legitdogeminer_session=eyJpdiI6IkNFeUl2aTFyNmhpNmFzTWZWSTFpd3c9PSIsInZhbHVlIjoiQ1JoMjZsRE5oMWhpaWNJdUdHYjRZM2kwYzhtVW5yU1g1ZGdDbGRuK21NUGRrTG5ra0hlK2tqU1ZHMGRML2MxNi9uMWh0dmkxUkxKQ0hFbms1N2dKdzZuNERMM1NxTkpwK0JVQUJzQkovSjJCVEVHZUx3L0x4ZThLMVVVZm5OYTMiLCJtYWMiOiJlZGUxODBiZDM1ZTBmZDRmZjU1YjZhMjI1NTUzMmZmZDFkODdjNDlmNTMwZTA5NDY4NzMyNGU1N2IxMjBhZjk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 25 Apr 2026 12:46:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 12 Mar 2026 03:38:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 909\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1852,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e044faf387fa1c14489a3a6066df539","sha1":"fb8306640d75e9b61d20d50a7dcb4834fad3b388","sha256":"be3af1f62be1b4510c63de5e07903c70b78595ce2ba981b2c5c4ef166a9c1657","sha512":"1d0c72f4e8f644169a4cb348f597964a666cf072fd48b9691d7cd70f44b7032ccfcbe0c7a6254697e0bae0bcdf7aa7fed03c4f571545ebb4a264dde762f1b32f","ssdeep":"","tlshash":"013184e96395c1f8430887b046baf47c655234f85e03882cd7edb913d0590af0c29fc2","first_seen":"2026-02-01T01:15:05.870971Z","last_seen":"2026-04-18T12:54:02.969686Z","times_seen":4,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"legitdogeminer.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legitdogeminer.top/alialoula/cryptologos/BNB.svg","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.legitdogeminer.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 12:02:58 GMT","end":"Mon, 13 Jul 2026 12:02:57 GMT"},"fingerprint":{"sha1":"0E:90:D0:F7:5D:44:A9:8C:27:BB:F2:51:A3:8E:0E:DF:B6:EC:72:14","sha256":"AC:BB:7B:2A:58:51:FD:CE:3C:42:3D:16:DC:9F:9D:77:97:C1:41:82:E9:D3:C0:86:53:82:3F:06:95:57:AA:28"}}},"request":{"raw":"GET /alialoula/cryptologos/BNB.svg HTTP/1.1\r\nHost: legitdogeminer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjBsQ091bXk5WHN0T0xlYklkbnVQTWc9PSIsInZhbHVlIjoiKzJzN0FvbFJTd2p2QUorYVNCSEdRNXJEbnBiY3NMYVIxUi9VT1hQZnJ0cEdkVFdoaWI3b0c2UjJQdmRuVDZLaEt2ay96ZU10U25qOTFJSzcrK0xVSUViUVMwZ0piRGtESHdYM25tNjJYUUZKNjU2Rlc3clhxUlZTdmFOY0hzUG8iLCJtYWMiOiIyNTA4OTJhOTFmMDQ1ZDVhNWIxNGY3MDk4NjRmNTZjNmRlNGI4ZGQ2M2JhZTQzMTRkOTk0MDUxNWZjMjM1M2Q5IiwidGFnIjoiIn0%3D; legitdogeminer_session=eyJpdiI6IkNFeUl2aTFyNmhpNmFzTWZWSTFpd3c9PSIsInZhbHVlIjoiQ1JoMjZsRE5oMWhpaWNJdUdHYjRZM2kwYzhtVW5yU1g1ZGdDbGRuK21NUGRrTG5ra0hlK2tqU1ZHMGRML2MxNi9uMWh0dmkxUkxKQ0hFbms1N2dKdzZuNERMM1NxTkpwK0JVQUJzQkovSjJCVEVHZUx3L0x4ZThLMVVVZm5OYTMiLCJtYWMiOiJlZGUxODBiZDM1ZTBmZDRmZjU1YjZhMjI1NTUzMmZmZDFkODdjNDlmNTMwZTA5NDY4NzMyNGU1N2IxMjBhZjk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 25 Apr 2026 12:46:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 12 Mar 2026 03:38:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 441\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1029,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"17441c49e3eb3632ae15acecd87fb143","sha1":"577559cd387358a1bf248027ddd5e7b534749e2c","sha256":"2b124632b2351fcacc9e55772561227e495755d4be364982d77c09420d95cceb","sha512":"d895867e89d1360328d215c926ad102c11ac22bb31f809d5a323424f959aadec9bb14a1985aeb352897c1fdff249b32349f1adea612d945245a93db7246aecd0","ssdeep":"","tlshash":"dc110ed0368892ed0914ab380b0ef07e3a3675f1427fd107d6c12f1bb0894aa0e779e4","first_seen":"2026-04-18T12:47:26.298254Z","last_seen":"2026-04-18T12:54:02.951609Z","times_seen":2,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"legitdogeminer.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://legitdogeminer.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 08:16:42 GMT\r\nexpires: Fri, 16 Apr 2027 08:16:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 189018\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-04-26T13:07:52.299829Z","times_seen":21860,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":79,"dns":5,"connect":7,"send":0,"wait":13,"receive":5,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/alpinejs@3.x.x/dist/cdn.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.15.11\r\nx-jsd-version-type: version\r\netag: W/\"b50b-PYaC4v/z7Vpzzd+TWtBc5BwXOP8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\nage: 11897\r\nx-served-by: cache-fra-eddf8230160-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 17152\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46347,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40767)","md5":"fee1350daa0192000a042e84674d2004","sha1":"3d8682e2fff3ed5a73cddf935ad05ce41c1738ff","sha256":"beeba63d08956f64fa060f6b6a29c87a341bf069fb96c9459c222c6fd42e58ae","sha512":"4dd71bb815923b8b90fa60251c89b3fedad8665a12cdadc34c5c9ca8be536829a051da1da5616f4e60aa7a950e488a0b574ed053117a3d3e4a74d6030f52dbb5","ssdeep":"768:DBCz6escmy5dIOT2E3KBdoqCHL6POK/5IKYqLWoOAUORrST5yUGz++u3hrpShpJg:FCuei1EqCr6POQDYmWomUVzMrpShpJyf","tlshash":"e723f9e97396b13283ef01b190bb424af33d2994150e5464f669d8ee383948d51f3fba","first_seen":"2026-04-02T23:56:24.526238Z","last_seen":"2026-04-26T13:30:13.238445Z","times_seen":649,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":48,"dns":2,"connect":19,"send":0,"wait":14,"receive":7,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:47:00.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://legitdogeminer.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 08:16:42 GMT\r\nexpires: Fri, 16 Apr 2027 08:16:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 189018\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-04-26T13:07:52.299829Z","times_seen":21860,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":102,"dns":0,"connect":21,"send":0,"wait":8,"receive":3,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1543536448-d247542f576c?q=80\u0026w=500\u0026auto=format\u0026fit=crop","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:47:03.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1543536448-d247542f576c?q=80\u0026w=500\u0026auto=format\u0026fit=crop HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nx-imgix-id: d49278b6d0795a10373db2748d5e7c913f003115\r\ncache-control: public, max-age=300\r\nserver: imgix\r\ndate: Sat, 18 Apr 2026 12:47:03 GMT\r\nage: 134\r\naccept-ranges: bytes\r\ncontent-type: text/html,text/html\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220194-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 29\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T13:08:22.12078Z","times_seen":14228674,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":51,"dns":15,"connect":13,"send":0,"wait":53,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@alpinejs/collapse@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@alpinejs/collapse@3.x.x/dist/cdn.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.15.0\r\nx-jsd-version-type: version\r\netag: W/\"5a8-0KJ/LfCsWfUBHkqP1xORNDxl53I\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\nage: 34981\r\nx-served-by: cache-fra-etou8220046-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 630\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1448,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1447)","md5":"9c8363b44f4f4d55d36379db4a8d3e17","sha1":"d0a27f2df0ac59f5011e4a8fd71391343c65e772","sha256":"c7661d4e2cf0465e3cd693190debb5f592ac72dcc4cfe650581273767558b27b","sha512":"63fea6219e0920c6801a4b5ca40582c6e08efc2712148806394f9fadea2816a499e7cb45b315b82702954a1429ba2b01367afa7dfce43e465ce50e5113f05f52","ssdeep":"","tlshash":"893112f1730531b0e3ca6e77d889d65c913a9849634aa15cdf1a6c15080e4aefd1fbb1","first_seen":"2024-06-11T15:19:39Z","last_seen":"2026-04-26T07:35:48.799675Z","times_seen":664,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":52,"dns":2,"connect":13,"send":0,"wait":19,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legitdogeminer.top/alialoula/cryptologos/DOGE.svg","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.legitdogeminer.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 12:02:58 GMT","end":"Mon, 13 Jul 2026 12:02:57 GMT"},"fingerprint":{"sha1":"0E:90:D0:F7:5D:44:A9:8C:27:BB:F2:51:A3:8E:0E:DF:B6:EC:72:14","sha256":"AC:BB:7B:2A:58:51:FD:CE:3C:42:3D:16:DC:9F:9D:77:97:C1:41:82:E9:D3:C0:86:53:82:3F:06:95:57:AA:28"}}},"request":{"raw":"GET /alialoula/cryptologos/DOGE.svg HTTP/1.1\r\nHost: legitdogeminer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjBsQ091bXk5WHN0T0xlYklkbnVQTWc9PSIsInZhbHVlIjoiKzJzN0FvbFJTd2p2QUorYVNCSEdRNXJEbnBiY3NMYVIxUi9VT1hQZnJ0cEdkVFdoaWI3b0c2UjJQdmRuVDZLaEt2ay96ZU10U25qOTFJSzcrK0xVSUViUVMwZ0piRGtESHdYM25tNjJYUUZKNjU2Rlc3clhxUlZTdmFOY0hzUG8iLCJtYWMiOiIyNTA4OTJhOTFmMDQ1ZDVhNWIxNGY3MDk4NjRmNTZjNmRlNGI4ZGQ2M2JhZTQzMTRkOTk0MDUxNWZjMjM1M2Q5IiwidGFnIjoiIn0%3D; legitdogeminer_session=eyJpdiI6IkNFeUl2aTFyNmhpNmFzTWZWSTFpd3c9PSIsInZhbHVlIjoiQ1JoMjZsRE5oMWhpaWNJdUdHYjRZM2kwYzhtVW5yU1g1ZGdDbGRuK21NUGRrTG5ra0hlK2tqU1ZHMGRML2MxNi9uMWh0dmkxUkxKQ0hFbms1N2dKdzZuNERMM1NxTkpwK0JVQUJzQkovSjJCVEVHZUx3L0x4ZThLMVVVZm5OYTMiLCJtYWMiOiJlZGUxODBiZDM1ZTBmZDRmZjU1YjZhMjI1NTUzMmZmZDFkODdjNDlmNTMwZTA5NDY4NzMyNGU1N2IxMjBhZjk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 25 Apr 2026 12:46:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 12 Mar 2026 03:39:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 35640\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95603,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01579acf934e7c997844695074a23c97","sha1":"4323f558ba562b47456c78b51357ef8befbf68d2","sha256":"e90a01b7147bb0691b6e6b6490220fc306e436bf3b86c8ed5e7c27f654daff1c","sha512":"b7f1a66ccc2200a31ccdb3b1392a01610a700be514a645aedafe28c9dcc725bc20f7e14997f638b6f47ab6a994e40ddf61f38da07491394eadaff3f6842bd27d","ssdeep":"768:y/b+kCoUDEiM5D/gwZVXEsxlTPJevAXcI7jcQOEPNUz+nB4hmVq59250VHWWpLp3:4apw7XUvAsDEPNkeBxgWGWlCZdT8EkZI","tlshash":"079365f6a3d4b2d0e546e7f4c62a95b53a7738fe3b25cb5803e46d94ea0116d848ccc1","first_seen":"2026-04-18T12:47:26.289109Z","last_seen":"2026-04-18T12:54:02.946626Z","times_seen":2,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"legitdogeminer.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legitdogeminer.top/alialoula/cryptologos/USDTBNB.svg","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.legitdogeminer.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 12:02:58 GMT","end":"Mon, 13 Jul 2026 12:02:57 GMT"},"fingerprint":{"sha1":"0E:90:D0:F7:5D:44:A9:8C:27:BB:F2:51:A3:8E:0E:DF:B6:EC:72:14","sha256":"AC:BB:7B:2A:58:51:FD:CE:3C:42:3D:16:DC:9F:9D:77:97:C1:41:82:E9:D3:C0:86:53:82:3F:06:95:57:AA:28"}}},"request":{"raw":"GET /alialoula/cryptologos/USDTBNB.svg HTTP/1.1\r\nHost: legitdogeminer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjBsQ091bXk5WHN0T0xlYklkbnVQTWc9PSIsInZhbHVlIjoiKzJzN0FvbFJTd2p2QUorYVNCSEdRNXJEbnBiY3NMYVIxUi9VT1hQZnJ0cEdkVFdoaWI3b0c2UjJQdmRuVDZLaEt2ay96ZU10U25qOTFJSzcrK0xVSUViUVMwZ0piRGtESHdYM25tNjJYUUZKNjU2Rlc3clhxUlZTdmFOY0hzUG8iLCJtYWMiOiIyNTA4OTJhOTFmMDQ1ZDVhNWIxNGY3MDk4NjRmNTZjNmRlNGI4ZGQ2M2JhZTQzMTRkOTk0MDUxNWZjMjM1M2Q5IiwidGFnIjoiIn0%3D; legitdogeminer_session=eyJpdiI6IkNFeUl2aTFyNmhpNmFzTWZWSTFpd3c9PSIsInZhbHVlIjoiQ1JoMjZsRE5oMWhpaWNJdUdHYjRZM2kwYzhtVW5yU1g1ZGdDbGRuK21NUGRrTG5ra0hlK2tqU1ZHMGRML2MxNi9uMWh0dmkxUkxKQ0hFbms1N2dKdzZuNERMM1NxTkpwK0JVQUJzQkovSjJCVEVHZUx3L0x4ZThLMVVVZm5OYTMiLCJtYWMiOiJlZGUxODBiZDM1ZTBmZDRmZjU1YjZhMjI1NTUzMmZmZDFkODdjNDlmNTMwZTA5NDY4NzMyNGU1N2IxMjBhZjk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 25 Apr 2026 12:46:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 12 Mar 2026 03:39:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1123\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2949,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b368c24a7048a724ab71552f0c91722c","sha1":"15d2cfef1737a3964aaaa6d25cc8fe7b38922ce9","sha256":"f39dd31dee5d2783f8b157b76d205dd7bb3c8f7d20265007bbfec42e35be5e07","sha512":"d26ba217ec897cee7d4a0315dc5ae296daf3a655e0a7e9e0cc5ea92a1915badb32101175a93865bdfe0c4efabafa69a859c3a1489e42e5417e4c1ee7b9028ca9","ssdeep":"","tlshash":"c35172c033fce1e982058b294ada6069767330fdf25dce21d7c46e096c5a02f1ce89d5","first_seen":"2025-10-26T12:36:10.079023Z","last_seen":"2026-04-18T12:54:02.937451Z","times_seen":6,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"legitdogeminer.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legitdogeminer.top/alialoula/cryptologos/TRX.svg","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.legitdogeminer.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 12:02:58 GMT","end":"Mon, 13 Jul 2026 12:02:57 GMT"},"fingerprint":{"sha1":"0E:90:D0:F7:5D:44:A9:8C:27:BB:F2:51:A3:8E:0E:DF:B6:EC:72:14","sha256":"AC:BB:7B:2A:58:51:FD:CE:3C:42:3D:16:DC:9F:9D:77:97:C1:41:82:E9:D3:C0:86:53:82:3F:06:95:57:AA:28"}}},"request":{"raw":"GET /alialoula/cryptologos/TRX.svg HTTP/1.1\r\nHost: legitdogeminer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjBsQ091bXk5WHN0T0xlYklkbnVQTWc9PSIsInZhbHVlIjoiKzJzN0FvbFJTd2p2QUorYVNCSEdRNXJEbnBiY3NMYVIxUi9VT1hQZnJ0cEdkVFdoaWI3b0c2UjJQdmRuVDZLaEt2ay96ZU10U25qOTFJSzcrK0xVSUViUVMwZ0piRGtESHdYM25tNjJYUUZKNjU2Rlc3clhxUlZTdmFOY0hzUG8iLCJtYWMiOiIyNTA4OTJhOTFmMDQ1ZDVhNWIxNGY3MDk4NjRmNTZjNmRlNGI4ZGQ2M2JhZTQzMTRkOTk0MDUxNWZjMjM1M2Q5IiwidGFnIjoiIn0%3D; legitdogeminer_session=eyJpdiI6IkNFeUl2aTFyNmhpNmFzTWZWSTFpd3c9PSIsInZhbHVlIjoiQ1JoMjZsRE5oMWhpaWNJdUdHYjRZM2kwYzhtVW5yU1g1ZGdDbGRuK21NUGRrTG5ra0hlK2tqU1ZHMGRML2MxNi9uMWh0dmkxUkxKQ0hFbms1N2dKdzZuNERMM1NxTkpwK0JVQUJzQkovSjJCVEVHZUx3L0x4ZThLMVVVZm5OYTMiLCJtYWMiOiJlZGUxODBiZDM1ZTBmZDRmZjU1YjZhMjI1NTUzMmZmZDFkODdjNDlmNTMwZTA5NDY4NzMyNGU1N2IxMjBhZjk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 25 Apr 2026 12:46:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 12 Mar 2026 03:39:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 606\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1193,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"301784649bb96131ea77cbaefaa50fad","sha1":"54bd191d4f97309feefbaf7340b7d69894dfb884","sha256":"38ce66859a934010105f2119853b2a009f4ae798b2ef5c6cb39c9ac8cfb04b04","sha512":"bcaf415eb7fe5790bebbaaad7c94f498ea567f22ff56699f20c2b7506161fbb039213798df9f905e76a3e1bf796cbdd7cb2c601934ba13b98313ff295ddb7fef","ssdeep":"","tlshash":"10217470b7f8e2c69605a34122ea7438b21b2521afed4b10e784b58980a840eda34dd7","first_seen":"2026-04-18T12:47:26.301146Z","last_seen":"2026-04-18T12:54:02.942535Z","times_seen":2,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"legitdogeminer.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legitdogeminer.top/assets/themes/frontend/default/vendors/bootstrap/bootstrap.min.js","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.legitdogeminer.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 12:02:58 GMT","end":"Mon, 13 Jul 2026 12:02:57 GMT"},"fingerprint":{"sha1":"0E:90:D0:F7:5D:44:A9:8C:27:BB:F2:51:A3:8E:0E:DF:B6:EC:72:14","sha256":"AC:BB:7B:2A:58:51:FD:CE:3C:42:3D:16:DC:9F:9D:77:97:C1:41:82:E9:D3:C0:86:53:82:3F:06:95:57:AA:28"}}},"request":{"raw":"GET /assets/themes/frontend/default/vendors/bootstrap/bootstrap.min.js HTTP/1.1\r\nHost: legitdogeminer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjBsQ091bXk5WHN0T0xlYklkbnVQTWc9PSIsInZhbHVlIjoiKzJzN0FvbFJTd2p2QUorYVNCSEdRNXJEbnBiY3NMYVIxUi9VT1hQZnJ0cEdkVFdoaWI3b0c2UjJQdmRuVDZLaEt2ay96ZU10U25qOTFJSzcrK0xVSUViUVMwZ0piRGtESHdYM25tNjJYUUZKNjU2Rlc3clhxUlZTdmFOY0hzUG8iLCJtYWMiOiIyNTA4OTJhOTFmMDQ1ZDVhNWIxNGY3MDk4NjRmNTZjNmRlNGI4ZGQ2M2JhZTQzMTRkOTk0MDUxNWZjMjM1M2Q5IiwidGFnIjoiIn0%3D; legitdogeminer_session=eyJpdiI6IkNFeUl2aTFyNmhpNmFzTWZWSTFpd3c9PSIsInZhbHVlIjoiQ1JoMjZsRE5oMWhpaWNJdUdHYjRZM2kwYzhtVW5yU1g1ZGdDbGRuK21NUGRrTG5ra0hlK2tqU1ZHMGRML2MxNi9uMWh0dmkxUkxKQ0hFbms1N2dKdzZuNERMM1NxTkpwK0JVQUJzQkovSjJCVEVHZUx3L0x4ZThLMVVVZm5OYTMiLCJtYWMiOiJlZGUxODBiZDM1ZTBmZDRmZjU1YjZhMjI1NTUzMmZmZDFkODdjNDlmNTMwZTA5NDY4NzMyNGU1N2IxMjBhZjk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 17 Jul 2021 19:27:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15427\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60091,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (59812)","md5":"b5730588db13e71c65bdb1d234089260","sha1":"282209ef6065e8451a5623c1b208d256d7b14c27","sha256":"77e1728245a0c2de7d0859163ee081e1113aa75fd6894602cb5eb0d7e739bca9","sha512":"10a596b3565c036658f656cb2123f3f1a191dbe2fb25562a040613ab90178019128d14ae4041aa5b1f11d73017d7a29d5cf6828ce09a284f0c0a9534c1c1e51c","ssdeep":"768:Gs1FOa1EatDEOyStIzhgAQD/BExN8TVO3cQodO6/2Vm7MTRAxmYIZ9tFepWOgdJK:G9i5G/M+ThF6n","tlshash":"9a43b45a3258b87309de44a68076470bf7255d94b047812cb9bdacee1b3dc8272b7f78","first_seen":"2023-03-07T12:10:18Z","last_seen":"2026-04-26T08:53:05.2908Z","times_seen":12497,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"legitdogeminer.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:47:00.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://legitdogeminer.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 08:16:42 GMT\r\nexpires: Fri, 16 Apr 2027 08:16:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 189018\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-04-26T13:07:52.299829Z","times_seen":21860,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legitdogeminer.top/alialoula/cryptologos/BTC.svg","fqdn":"legitdogeminer.top","domain":"legitdogeminer.top","tld":"top"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legitdogeminer.top/","date":"2026-04-18T12:46:59.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.legitdogeminer.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 12:02:58 GMT","end":"Mon, 13 Jul 2026 12:02:57 GMT"},"fingerprint":{"sha1":"0E:90:D0:F7:5D:44:A9:8C:27:BB:F2:51:A3:8E:0E:DF:B6:EC:72:14","sha256":"AC:BB:7B:2A:58:51:FD:CE:3C:42:3D:16:DC:9F:9D:77:97:C1:41:82:E9:D3:C0:86:53:82:3F:06:95:57:AA:28"}}},"request":{"raw":"GET /alialoula/cryptologos/BTC.svg HTTP/1.1\r\nHost: legitdogeminer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legitdogeminer.top/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjBsQ091bXk5WHN0T0xlYklkbnVQTWc9PSIsInZhbHVlIjoiKzJzN0FvbFJTd2p2QUorYVNCSEdRNXJEbnBiY3NMYVIxUi9VT1hQZnJ0cEdkVFdoaWI3b0c2UjJQdmRuVDZLaEt2ay96ZU10U25qOTFJSzcrK0xVSUViUVMwZ0piRGtESHdYM25tNjJYUUZKNjU2Rlc3clhxUlZTdmFOY0hzUG8iLCJtYWMiOiIyNTA4OTJhOTFmMDQ1ZDVhNWIxNGY3MDk4NjRmNTZjNmRlNGI4ZGQ2M2JhZTQzMTRkOTk0MDUxNWZjMjM1M2Q5IiwidGFnIjoiIn0%3D; legitdogeminer_session=eyJpdiI6IkNFeUl2aTFyNmhpNmFzTWZWSTFpd3c9PSIsInZhbHVlIjoiQ1JoMjZsRE5oMWhpaWNJdUdHYjRZM2kwYzhtVW5yU1g1ZGdDbGRuK21NUGRrTG5ra0hlK2tqU1ZHMGRML2MxNi9uMWh0dmkxUkxKQ0hFbms1N2dKdzZuNERMM1NxTkpwK0JVQUJzQkovSjJCVEVHZUx3L0x4ZThLMVVVZm5OYTMiLCJtYWMiOiJlZGUxODBiZDM1ZTBmZDRmZjU1YjZhMjI1NTUzMmZmZDFkODdjNDlmNTMwZTA5NDY4NzMyNGU1N2IxMjBhZjk3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 25 Apr 2026 12:46:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 12 Mar 2026 03:37:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 888\r\ndate: Sat, 18 Apr 2026 12:46:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1822,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ed5c2d4a9ed59ceb62dbbe6f64502390","sha1":"4a584e6ed92f24216d11ea883a7ebfa8d468d305","sha256":"ab61b19cf1c32d768eac31d6d77ec263e64ae7172222abaa920d2f7496728075","sha512":"64cea2fe497fef809e349f2668e51fe5d91dc7a355fafb54d62d0a264f928de1600ba00e0026ac667355c7aef6045bf6ef27c70d0ef38a368d92822b874e903d","ssdeep":"","tlshash":"1331a7f5e3c4d5e1e10ea3b0a645f038263778f97f26872c4ea42a81d75606d4c48c91","first_seen":"2026-04-18T12:47:26.302442Z","last_seen":"2026-04-18T12:54:02.950012Z","times_seen":2,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"legitdogeminer.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}