{"report_id":"a43a48bd-a70f-48c3-aad2-04591bf83515","version":6,"status":"done","tags":[],"date":"2025-10-15T12:31:15Z","url":{"schema":"http","addr":"enablemanufacturingdocufile.crookoone.ru/kr@slurpmail.net","fqdn":"enablemanufacturingdocufile.crookoone.ru","domain":"crookoone.ru","tld":"ru"},"ip":{"addr":"172.67.152.227","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"enablemanufacturingdocufile.crookoone.ru/kr@slurpmail.net","fqdn":"enablemanufacturingdocufile.crookoone.ru","domain":"crookoone.ru","tld":"ru"},"title":"Casa Sol • Comida Mexicana"},"submit":{"url":{"schema":"http","addr":"enablemanufacturingdocufile.crookoone.ru/kr@slurpmail.net","fqdn":"enablemanufacturingdocufile.crookoone.ru","domain":"crookoone.ru","tld":"ru"},"ip":{"addr":"172.67.152.227","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-19T12:31:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"enablemanufacturingdocufile.crookoone.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"enablemanufacturingdocufile.crookoone.ru","ip":{"addr":"172.67.152.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-19","domain_rank":0,"first_seen":"2025-10-15T12:31:15.786834Z","last_seen":"2025-10-15T12:31:15.786834Z","alert_count":3,"request_count":3,"received_data":47516,"sent_data":3007,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"enablemanufacturingdocufile.crookoone.ru/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"enablemanufacturingdocufile.crookoone.ru","domain":"crookoone.ru","tld":"ru"},"ip":{"addr":"172.67.152.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-09T03:36:01.732562Z","times_seen":296611,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enablemanufacturingdocufile.crookoone.ru/kr@slurpmail.net","fqdn":"enablemanufacturingdocufile.crookoone.ru","domain":"crookoone.ru","tld":"ru"},"ip":{"addr":"172.67.152.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5bdf0d224673779ef9265266c25146c5","sha1":"604fba1c553b16dab113e9e2a3b1af7d020b4a69","sha256":"e49ce78a7ef6ce698107a4bbf78165a1ff3ee73cd7a2abbc02fbbbd7c54bdea5","sha512":"2a1be3911ff113187433f893a1b535d220e99ce63e25458477266feab714578e9467c68e02ab0561f2f8e68dbc99033fa5456a0d8686f56275b86690206f0ad5","ssdeep":"","tlshash":"0441d1737539253b09eb57fba39367d62d2510523802d45d3f3c8a484e36d8298729d9","size":1941,"data":"","first_seen":"2025-10-15T12:31:17.270228Z","last_seen":"2025-10-30T17:26:27.968245Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"enablemanufacturingdocufile.crookoone.ru/kr@slurpmail.net","fqdn":"enablemanufacturingdocufile.crookoone.ru","domain":"crookoone.ru","tld":"ru"},"ip":{"addr":"172.67.152.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-15T12:30:50.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crookoone.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 14:27:48 GMT","end":"Fri, 19 Dec 2025 15:25:31 GMT"},"fingerprint":{"sha1":"85:7A:32:BB:A2:A5:92:04:2D:85:59:4F:DF:38:2F:2D:3C:2A:EB:89","sha256":"88:5A:27:69:CF:42:43:13:14:5E:74:73:ED:83:8E:33:D4:1D:A4:5A:09:79:4F:7C:CC:DA:24:A7:A8:13:21:D7"}}},"request":{"raw":"GET /kr@slurpmail.net HTTP/1.1\r\nHost: enablemanufacturingdocufile.crookoone.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 12:30:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yYT97PlmpC%2Fw3GKE0MG9y1G6Gd3YeP3G5GDBI3AVMGSh9JVHDaKzatjRhsHkK9QCJ9vQmnnK%2B71DR94pvysOCeZsuDQlg%2F4Tjoo%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkRrMWtmajQxdHVjTFpFMWJOaktQRGc9PSIsInZhbHVlIjoiUzNXWkFDQTFmUFlHZkdsZU15UElINGVKWEZJdUdxYjVFaUVrL0UrVUZ6aU5NSXBCYXJib01sbVo0MER5SGF1MzVDZ0NPdjg1UFVoeVpiTmFHOXdLaW1VZkYrQnNpMCtHV0xrQXJsZHorSEoyUVJ0UUtRNDAvV1NnTmI3c3FiMVQiLCJtYWMiOiJhNDU3ODcxMjM5YjY5MzUzOWQ4MGE4NzUxNmJkNDhmYzY5N2JlNTlmOWQ1YTU0OWQyNjcyYTZkZmJiNTYwMDU3IiwidGFnIjoiIn0%3D; SameSite=None; Secure; Path=/; Max-Age=7200; Expires=Wed, 15 Oct 2025 14:30:51 GMT\nlaravel_session=eyJpdiI6ImRORHNNZjk2TUVTQTRrUUVpc0VuekE9PSIsInZhbHVlIjoiWEJiV2pHeU4yV3FJcVp3a29wNmdFYlYrOWpYa3p6Vm9oeG95YVJCSDZZdWJwNlN0cVp6WjBvZStDWDdTRHo1ckVKUS9mMFZlOTJDNFpWZ2gweWh3ZmlWUGlzWE1WVkRGUisxMnJHYlVDa0VDWWdxVGg5L3NnblUrWDdKWUZuQjYiLCJtYWMiOiIwNzNkNzUzZTVkZjdiZDc1YzY1NmUwMzI1NWYwODc5YzMwOTk2MmY1YTlkZmUyYzUxZjAxMDZhZjJkNTNhNTNlIiwidGFnIjoiIn0%3D; HttpOnly; SameSite=None; Secure; Path=/; Max-Age=7200; Expires=Wed, 15 Oct 2025 14:30:51 GMT\r\ncf-ray: 98ef547e4856723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21300,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (350)","md5":"72cb4d940603ef1770c5e6ee36a31414","sha1":"1dfcc6f14c5b44e8505f0fa33de5c9e0a4d66d87","sha256":"b24c8eebbba7e94f1ced797a480f14a2da57717c12b1abc2fda46957b182a7bb","sha512":"152b9b776a44089bb2fc6462e7a957a3ce66768e17ee5988ace247dcae4ab50d8a4d7a5d29dcbfab67cac188b7ac5b0854263d6d20721678a119eefc011eb1dc","ssdeep":"384:3FujeA+o6+CfcB7pBCW636OzxvenjCvb7DgNpqCVxz1:yducHBCW65FeGT3gLdz1","tlshash":"5ba296a274b0613f2813e0d977e9974f2569e007d90b53887aad8ba40fc7ed28df3449","first_seen":"2025-10-15T12:31:17.258748Z","last_seen":"2025-10-22T17:51:06.343406Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1310,"timings":{"blocked":283,"dns":82,"connect":1,"send":0,"wait":744,"receive":0,"ssl":196},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"enablemanufacturingdocufile.crookoone.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enablemanufacturingdocufile.crookoone.ru/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"enablemanufacturingdocufile.crookoone.ru","domain":"crookoone.ru","tld":"ru"},"ip":{"addr":"172.67.152.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://enablemanufacturingdocufile.crookoone.ru/kr@slurpmail.net","date":"2025-10-15T12:30:51.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crookoone.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 14:27:48 GMT","end":"Fri, 19 Dec 2025 15:25:31 GMT"},"fingerprint":{"sha1":"85:7A:32:BB:A2:A5:92:04:2D:85:59:4F:DF:38:2F:2D:3C:2A:EB:89","sha256":"88:5A:27:69:CF:42:43:13:14:5E:74:73:ED:83:8E:33:D4:1D:A4:5A:09:79:4F:7C:CC:DA:24:A7:A8:13:21:D7"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: enablemanufacturingdocufile.crookoone.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://enablemanufacturingdocufile.crookoone.ru/kr@slurpmail.net\r\nCookie: XSRF-TOKEN=eyJpdiI6IkRrMWtmajQxdHVjTFpFMWJOaktQRGc9PSIsInZhbHVlIjoiUzNXWkFDQTFmUFlHZkdsZU15UElINGVKWEZJdUdxYjVFaUVrL0UrVUZ6aU5NSXBCYXJib01sbVo0MER5SGF1MzVDZ0NPdjg1UFVoeVpiTmFHOXdLaW1VZkYrQnNpMCtHV0xrQXJsZHorSEoyUVJ0UUtRNDAvV1NnTmI3c3FiMVQiLCJtYWMiOiJhNDU3ODcxMjM5YjY5MzUzOWQ4MGE4NzUxNmJkNDhmYzY5N2JlNTlmOWQ1YTU0OWQyNjcyYTZkZmJiNTYwMDU3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRORHNNZjk2TUVTQTRrUUVpc0VuekE9PSIsInZhbHVlIjoiWEJiV2pHeU4yV3FJcVp3a29wNmdFYlYrOWpYa3p6Vm9oeG95YVJCSDZZdWJwNlN0cVp6WjBvZStDWDdTRHo1ckVKUS9mMFZlOTJDNFpWZ2gweWh3ZmlWUGlzWE1WVkRGUisxMnJHYlVDa0VDWWdxVGg5L3NnblUrWDdKWUZuQjYiLCJtYWMiOiIwNzNkNzUzZTVkZjdiZDc1YzY1NmUwMzI1NWYwODc5YzMwOTk2MmY1YTlkZmUyYzUxZjAxMDZhZjJkNTNhNTNlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 12:30:51 GMT\r\ncontent-type: application/javascript\r\nexpires: Wed, 15 Oct 2025 13:18:51 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qYiFMGbVAmWGKTz9Zy0o%2FUwR3PlfwaL91vTAIgApNmWwNxjp33sJNlvaLNInI6CAzfIu2D1Ii%2BjFuX7mOS2u9F3Z%2FLClNHG7mce3USeGJ2Sj00G4RkNJvNB0my%2F%2BuP1yyJh9Hx591n0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98ef54841eeb723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-09T03:36:01.732562Z","times_seen":296611,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"enablemanufacturingdocufile.crookoone.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enablemanufacturingdocufile.crookoone.ru/favicon.ico","fqdn":"enablemanufacturingdocufile.crookoone.ru","domain":"crookoone.ru","tld":"ru"},"ip":{"addr":"172.67.152.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://enablemanufacturingdocufile.crookoone.ru/kr@slurpmail.net","date":"2025-10-15T12:30:51.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crookoone.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 14:27:48 GMT","end":"Fri, 19 Dec 2025 15:25:31 GMT"},"fingerprint":{"sha1":"85:7A:32:BB:A2:A5:92:04:2D:85:59:4F:DF:38:2F:2D:3C:2A:EB:89","sha256":"88:5A:27:69:CF:42:43:13:14:5E:74:73:ED:83:8E:33:D4:1D:A4:5A:09:79:4F:7C:CC:DA:24:A7:A8:13:21:D7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: enablemanufacturingdocufile.crookoone.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://enablemanufacturingdocufile.crookoone.ru/kr@slurpmail.net\r\nCookie: XSRF-TOKEN=eyJpdiI6IkRrMWtmajQxdHVjTFpFMWJOaktQRGc9PSIsInZhbHVlIjoiUzNXWkFDQTFmUFlHZkdsZU15UElINGVKWEZJdUdxYjVFaUVrL0UrVUZ6aU5NSXBCYXJib01sbVo0MER5SGF1MzVDZ0NPdjg1UFVoeVpiTmFHOXdLaW1VZkYrQnNpMCtHV0xrQXJsZHorSEoyUVJ0UUtRNDAvV1NnTmI3c3FiMVQiLCJtYWMiOiJhNDU3ODcxMjM5YjY5MzUzOWQ4MGE4NzUxNmJkNDhmYzY5N2JlNTlmOWQ1YTU0OWQyNjcyYTZkZmJiNTYwMDU3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRORHNNZjk2TUVTQTRrUUVpc0VuekE9PSIsInZhbHVlIjoiWEJiV2pHeU4yV3FJcVp3a29wNmdFYlYrOWpYa3p6Vm9oeG95YVJCSDZZdWJwNlN0cVp6WjBvZStDWDdTRHo1ckVKUS9mMFZlOTJDNFpWZ2gweWh3ZmlWUGlzWE1WVkRGUisxMnJHYlVDa0VDWWdxVGg5L3NnblUrWDdKWUZuQjYiLCJtYWMiOiIwNzNkNzUzZTVkZjdiZDc1YzY1NmUwMzI1NWYwODc5YzMwOTk2MmY1YTlkZmUyYzUxZjAxMDZhZjJkNTNhNTNlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Oct 2025 12:30:52 GMT\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PURVFjvyoHngxS0kgKpdOG2rylB7oXydSEpPiAg%2FzX%2FQUZCQa9BOG4gHiZzCV0yylj8A%2BEAZisss0iVWzRE4x%2F2m%2FpYQdd8iQy0%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjlZd2tJb2lSSnZlc0NIK0dHeHBSR2c9PSIsInZhbHVlIjoiNTJBSmswWmgrTWtwaW5QL21NL1JZbnpzSUp2Q3JENm03ZXdKUXJCUy85Ty9FZjZqaWlsSXRNYXN1RFhmdG80TWdTVFdWR2lGSUhQTlNrV3N1dWRETE41d04yRkROT2R4VENQVDlYVVltVCtHK0NsY1NxaTRPaHlSVG05bEpuSTIiLCJtYWMiOiJkYTQ1YTNiZmI0OGIwYzBiZDU5YmY1MTg5ZTJkYmYwYjM1ZTE1ZDZiZWUzMDQzNmUwOWI3M2Q5YmRjYTY0MmMwIiwidGFnIjoiIn0%3D; SameSite=None; Secure; Path=/; Max-Age=7200; Expires=Wed, 15 Oct 2025 14:30:52 GMT\nlaravel_session=eyJpdiI6Ii9iL3NkaGtaR2J4OEgvSWdMRkVBdFE9PSIsInZhbHVlIjoiWG5yckIrZVRiY2hXRDBDaGkrN1VkUHhTdDB6UDRKc0Rqb2hXNTdZT204VGZ3N2FSbHk3TndjOXlTZEs5bDhkckxXenVrN1k2OWx3eVRNTi92SHNzdG9nbmZmZ3A3UnFldWNiQ3M4TTEvNW5lY2xqbXFyQnBBSjlvYTlzM0F2OUoiLCJtYWMiOiIwNzQ4OGYxZGFlZWE3Y2IwNjM5MjY3OWU3ZmZmNGRiNmQ5YWNkMjc0MTkzMzQ3OGM3YWY0MWIzYThiNjg5NWRjIiwidGFnIjoiIn0%3D; HttpOnly; SameSite=None; Secure; Path=/; Max-Age=7200; Expires=Wed, 15 Oct 2025 14:30:52 GMT\r\npriority: u=6,i=?0\r\ncf-ray: 98ef5484f9ef7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21300,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (350)","md5":"d4252910ac1a05a5a1e51b7d3fdd649b","sha1":"953a95cfcf9268de2c57454b887b2fc49a6b938a","sha256":"1d1750f4c0ff8509946ed1c98673e028b21f5e2e8dc5856c1ef70fd4d97b2483","sha512":"4b051667dec97ec28dbe1d4e4a4f2f1250ab78d5521ea312959d2baa221160740518cb5a8637c0f7a673578c52ca188e6e6721a87f5a776190319215803467f9","ssdeep":"384:3FujeA+o6+CfcB7pBCW636Ozxvenj5Db7DgNpqCVxz1:yducHBCW65Fe1P3gLdz1","tlshash":"cba296a274b0613f2813e0d976e9974f2569e007d90b53887aad8ba40fc7ed28df3459","first_seen":"2025-10-15T12:31:17.266037Z","last_seen":"2025-10-24T07:05:55.47737Z","times_seen":5,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":727,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"enablemanufacturingdocufile.crookoone.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}