{"report_id":"a4c6e51f-cc72-4d18-a35f-00d4acfd9a71","version":6,"status":"done","tags":[],"date":"2026-01-07T08:11:24Z","url":{"schema":"https","addr":"billions.run","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"172.67.170.138","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"billions.run/","fqdn":"billions.run","domain":"billions.run","tld":"run"},"title":"Billions Network | Claim $BILL Tokens \u0026 Billions Profiles","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"billions.run","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"172.67.170.138","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-11T08:11:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"billions.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"billions.run","ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-12-31T12:05:05.135577Z","last_seen":"2025-12-31T12:05:05.135577Z","alert_count":48,"request_count":12,"received_data":5598160,"sent_data":5993,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"billions.run/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b50fee27d8a9eb587da67ce338d0b47","sha1":"3fb7420e7c14ba6b890cecb7b93814388717c1cb","sha256":"8c1682ea6ecd3a0002667a22f7849bfd2b002c6cb2095b491425d68d6e0aecb6","sha512":"f7316d4b7b34ce9cd390d3d83138b3318806071981c0b7c26833f4ad4e191be6827ba928be977b5359cd84374256528b6b8f68e1f0282597c2c06e431eaabcf9","ssdeep":"192:V4LCuwlB++apYwxOgTL+/8zhJjSjNULKLwe:VGJwfRSfvTLThJjK9","tlshash":"f322c7e3f906616cc339c065141f6dcd1228be8550089b2ae7688cae7c39744a4efecf","size":10549,"data":"","first_seen":"2026-01-07T07:33:02.684718Z","last_seen":"2026-01-07T08:19:39.012912Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/slick-1.8.1.min.js","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fe49a2984ce8aebf2cf4a3fc542e854","sha1":"21329602c6d027a125589c601cb942e1ef989915","sha256":"95f7742649b3d9892f4e98a81564277c78007a1226c74823830f1fbf570d4602","sha512":"c332b2db9ff5ffeec1b6caf9be933435d062fee1201ad14874bd6ffa173c9b299d246a9eb2639f936417914a4e246ff2fa1f9e009d97aacb0f1c51ded6ec559c","ssdeep":"768:A8xvWc6xnMVrzT/VyrHn2Qb7tMjzai2WAR13QL2jRqh1vFcYZiWcTcLcwcqcecnw:AMhVyRbxBxWAR1AL4i/N8UCw7UGQNK0g","tlshash":"50a33ed6994bd0e98e5111ddd077ec18e0680963cdacf193ba2cdec2b42ef66c44763a","size":104817,"data":"","first_seen":"2025-12-31T12:05:10.091651Z","last_seen":"2026-01-07T08:11:29.869841Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/94d121d7-85cd-4884-9656-00f8b6388844","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-06-13T15:26:27.778147Z","times_seen":5085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-06-17T06:46:44.145207Z","times_seen":3131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dea9547554fbbc23292c949bee8402a8","sha1":"408703dbe1976edcd82fe84f299acaead357ab0c","sha256":"af7d8f49f637e5afc79f2e4e97dcb256f47893bab0b8c73426aa8dcce8a1dc4b","sha512":"53f0d2e0da9d10c71f10bbd9a242b42aebbcf581efdcf7d8e6c1c27f6c3179a06c619dbeff875fd91f0aae005aed0b207565023db2566a53a1b7b3c3c6ba7737","ssdeep":"","tlshash":"3b11c0753a2a6534c5c5418b317ee7a93e3260617b02a084c36ccc295d58e9718efdbe","size":902,"data":"","first_seen":"2026-01-07T08:11:27.034154Z","last_seen":"2026-01-07T08:11:27.034154Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-06-17T06:46:44.150063Z","times_seen":3012,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-06-17T06:46:44.164353Z","times_seen":3064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c59462bd812c794fbf6dc29811b895fe","sha1":"4a70b7e1647a58f329c0d49d247972986d763c8c","sha256":"539afcdc6fb2035d48a25ff30819fabbe58838de5fb8167cc9e176584db3bee7","sha512":"d052e1f51703c06559673fa905f60c9b0d90fd6388a0891f3d2b8d68f4fa899bce44effe1608bd6926d93157225021aa4fa6c1d06c3221e6a628cb33966db08e","ssdeep":"768:Lglv6cwRTwhNodvMo5XAOnlD18PRgYLY3eG3mnOe9IQR1vfa+ZM6cTcLcwcqcecy:9wHyv/rlR6yJNVe9ltN8UWJSxEsoNK0a","tlshash":"d3a34dd5994bd0e58e5221ded077ec15e0280963cdacf1a3ba2cdec1742ef66c44b63a","size":101593,"data":"","first_seen":"2025-12-31T12:05:10.114594Z","last_seen":"2026-01-07T08:11:29.881029Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"dcc160932d5f6a0ce5b78367bd83a20c","sha1":"266e0ab6f8c9b64f8a356058741fc9ed06ef2927","sha256":"9439cd7b503c36772998da4cf33f807e7171f1d1e3785e5923326df424a7a75f","sha512":"091c514b12274e59ad386b8699a4261512c62c4c809c87bf00a2dbc80964a28060bd567ad7c44cae1d9f5fc84750b83dc91ad30a69f13d917b889e4c1535877b","ssdeep":"","tlshash":"7cd023953875cc306195024a20b5d7d9367020507712f14481dccc1f6f12fd30cb155d","size":217,"data":"","first_seen":"2026-01-07T08:11:27.040937Z","last_seen":"2026-01-07T08:11:27.040937Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-06-17T06:46:44.138821Z","times_seen":3094,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"billions.run/Matter-Medium.woff2","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://billions.run/","date":"2026-01-07T08:11:00.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"billions.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 17:11:01 GMT","end":"Wed, 25 Mar 2026 18:08:44 GMT"},"fingerprint":{"sha1":"2D:75:F3:D7:10:9C:F4:FA:B8:ED:72:88:AC:15:DA:DD:45:03:4C:60","sha256":"3D:7E:B7:F4:B8:14:CF:60:79:6D:4B:DA:E5:8E:A1:A9:13:81:A1:8B:7D:F9:D6:2A:7F:A9:C0:BA:79:A7:AF:7F"}}},"request":{"raw":"GET /Matter-Medium.woff2 HTTP/1.1\r\nHost: billions.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://billions.run/index-KuMfDku-.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 08:11:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 31684\r\nlast-modified: Thu, 25 Dec 2025 19:04:44 GMT\r\npriority: u=4,i=?0\r\netag: \"694d8acc-7bc4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xtcU7iLcSLY5SR7n2%2BN%2FmYkf5bgXlJmYbq1rZYYf1XsOLWE%2FEN968cCHK2CiUSPeS%2FpMXV9S%2Ffy%2Fu%2B6kh1tVSGnRQzsyN%2BfagEE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9ba1fb614b6bb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31684,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 31684, version 1.0","md5":"34001ce802600cdb653686fa2d056c7c","sha1":"8e47c8f8947818dac322e1800fbe690b13283b87","sha256":"852fdd230ce4d0c327c0eb8ebc331a72fa0f33b12e677fcd9b9b4f2992231e2b","sha512":"48d9bbe0607ee7a881a1607bdc26a24d6257f86cb1178f9d20f0405a3c5960f4f1934f76b7f85108c3bc914446e85c6d31b66e4c88af47ff0ba952c722f84410","ssdeep":"768:N+hP87qVMITQjz0ZUBfIUwMsr3vIuJtEjGX9TsO70u:NcE6/ckWfIU8vjJtEaNQO7V","tlshash":"00e2f119e405660341cb11b46f093372360daaa18effb73d758a2b8b341e5becc4666f","first_seen":"2024-06-02T10:19:36Z","last_seen":"2026-06-10T06:41:59.936823Z","times_seen":235,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"billions.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/secureproxy?e=jscdn/getFile","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://billions.run/","date":"2026-01-07T08:11:00.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"billions.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 17:11:01 GMT","end":"Wed, 25 Mar 2026 18:08:44 GMT"},"fingerprint":{"sha1":"2D:75:F3:D7:10:9C:F4:FA:B8:ED:72:88:AC:15:DA:DD:45:03:4C:60","sha256":"3D:7E:B7:F4:B8:14:CF:60:79:6D:4B:DA:E5:8E:A1:A9:13:81:A1:8B:7D:F9:D6:2A:7F:A9:C0:BA:79:A7:AF:7F"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: billions.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://billions.run/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://billions.run\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"antstoakred0eqow1gpm\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 08:11:00 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lK9gWABT%2BjBzPwUzwZgTQ0kX424Vmukwpht58eVzpjdYgWdrJrLYOpj5EHx4kcJ2aV%2Bv1KmhFD5exrCpY5CLP5rjwWwIjojUlWg%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fb618b70b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text, with very long lines (933)","md5":"f8a62448f91af2b68d07d5fab944397e","sha1":"16f48309fa142353f9f60ee070a64fcfa6a23c44","sha256":"ba9146dcd38c10215184bf500937ce896c49f956d16b738c9b87c04a8e8c625b","sha512":"6839ded9ab3f9340caa71e4e0feed691aac9f675d8dcc3fb7fb1b5a4c81108cb5d5eeb36cb5b65d07db1548b11aa1081a95f71163818cc87d229bfbf2af7c9f8","ssdeep":"","tlshash":"ea2130bd7a166238c5d2118231bee7a93d3120217a02908496acdc199918e9b08dfdbe","first_seen":"2026-01-07T08:11:26.989203Z","last_seen":"2026-01-07T08:11:26.989203Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"billions.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/secureproxy.php?e=jscdn/getFile","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://billions.run/","date":"2026-01-07T08:11:00.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"billions.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 17:11:01 GMT","end":"Wed, 25 Mar 2026 18:08:44 GMT"},"fingerprint":{"sha1":"2D:75:F3:D7:10:9C:F4:FA:B8:ED:72:88:AC:15:DA:DD:45:03:4C:60","sha256":"3D:7E:B7:F4:B8:14:CF:60:79:6D:4B:DA:E5:8E:A1:A9:13:81:A1:8B:7D:F9:D6:2A:7F:A9:C0:BA:79:A7:AF:7F"}}},"request":{"raw":"POST /secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: billions.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://billions.run/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://billions.run\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"antstoakred0eqow1gpm\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 08:11:01 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E9Iy%2FH3R2Y6Y%2B1g5RSaE%2BBKLkdXxhHq6s9l4c%2Fa9kjXSZCLsN7rPpSBCbx5lLGROBfS%2F%2BqejNEtIEcI4vD9ba3N%2BLhQFJvefOLQ%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: PHP/8.3.17\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fb61eb73b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4425607,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5b3e11d80e8a1be390c79dbb448bb317","sha1":"f489e195cda1d3cd2dd5e0f885ef8f988fed995e","sha256":"d89f4ad8b2ab46706474b443a9c715c2be53f476edfbf6aa8cd7fee2c2b50228","sha512":"2e980856f91af912d2873e19e3a3879776a3f59716ee6376ab220462209b94ece5c2f6f75ca7d76a76e5d138024d9df088351b8dcd341b278f01808ad69579a1","ssdeep":"24576:k/JGfcvVvF60m5yarxpC0Bl0plEmZuAfS1b:KJvGN5yulUaSuAfSh","tlshash":"792512d19012d0d373365836b3f46d7f29b940eeea8a5aba3064ddc4709b4a2c5d4fd2","first_seen":"2026-01-07T07:57:14.295517Z","last_seen":"2026-01-07T08:11:43.447191Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1164,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"billions.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/favicon-16x16.png","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billions.run/","date":"2026-01-07T08:11:01.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"billions.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 17:11:01 GMT","end":"Wed, 25 Mar 2026 18:08:44 GMT"},"fingerprint":{"sha1":"2D:75:F3:D7:10:9C:F4:FA:B8:ED:72:88:AC:15:DA:DD:45:03:4C:60","sha256":"3D:7E:B7:F4:B8:14:CF:60:79:6D:4B:DA:E5:8E:A1:A9:13:81:A1:8B:7D:F9:D6:2A:7F:A9:C0:BA:79:A7:AF:7F"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: billions.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://billions.run/\r\nCookie: cf_clearance=wCswNilgcgAnG2hPfOu8QTMmV9cu9tYlpqV67AXJMbw-1767773460-1.2.1.1-7BJTmmXPIAaw8iL._RF205kwq24.t3PRDK_8hpN8Vbi1SMrScRwE74J.8EcdSWL8StFWpLKsIWYP3nOIZJ7pULqAgTr4LUyi4LaDDxKozzTXSLRVLYOPnFIPVIw2vSqNoYY6MPvJzuPJSVV7kL7KKm.o4hKvciUsTcBiOwHNR0iBxBVeG0xegUWDdaZAgg434R2LMmADPmC0tLhJtIzlE0xPNclKQIPi02tanDInaSc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 08:11:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 397\r\nlast-modified: Thu, 25 Dec 2025 19:04:44 GMT\r\npriority: u=6,i=?0\r\netag: \"694d8acc-18d\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SwIXjBJ2mpt45kFUFoFE6eoyP%2B8aRwDBTUQmOFvZV%2BuK%2FscuTGC28JPAilZDaQO178cmMmdbWJaDCyEdOR5rHDpHaUTHFMGhST8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9ba1fb633b7db4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa17ff4900c21d2eecd05baa4d2778f","sha1":"026b015c148e0ced43f7b6588ad89bf08663ed83","sha256":"a08660107144c707053e1ebc541da9ae565f24dfefd674fd94feb7c125e6130c","sha512":"367d4e1be267b85eb3977b6072d12923180a4a776605606c73dfca5b57e125ed4471ca6fca2981334872bf8e7f3184922a27004a925fa11302c09e2ea753cc06","ssdeep":"","tlshash":"04e0f1ef37db7abb831e4979e857d754b87f859c0061183c585d8086346543093f4ed1","first_seen":"2025-12-31T12:05:10.10744Z","last_seen":"2026-03-19T16:51:33.117116Z","times_seen":8,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"billions.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T08:11:00.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"billions.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 17:11:01 GMT","end":"Wed, 25 Mar 2026 18:08:44 GMT"},"fingerprint":{"sha1":"2D:75:F3:D7:10:9C:F4:FA:B8:ED:72:88:AC:15:DA:DD:45:03:4C:60","sha256":"3D:7E:B7:F4:B8:14:CF:60:79:6D:4B:DA:E5:8E:A1:A9:13:81:A1:8B:7D:F9:D6:2A:7F:A9:C0:BA:79:A7:AF:7F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: billions.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:00 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M7uEfDBBzpbMeAPmgadop1I11XeGiqdZisUeUia5NwIO%2FbvfMmghy6RxVBfGHBv8tOgIyWmeyK8WBlk8hh%2B%2BvrTUCeWZWAqwY6w%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ba1fb5dfce3b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}],"data":{"size":271859,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"eb7cb3d1edba7cfa2a2c06fabaedcd27","sha1":"e21b982e1e65d05fb28a41097b96ee9c0f82f81b","sha256":"8728d16026e9165a1e9b595b5a5c8e40448089a7f609f79c0f6ce608b27a7f57","sha512":"efe12049ac32c6dff3ece120d4abec797542966acb757470cb1b35782ef0cab5a612d769eae1a733f5a98b93a33583c80442fd356d3c278d2384d11f5d6b42cf","ssdeep":"768:ZAF6E2OAZnfhzX3lx/ilVI+P61ZRLhZ3JvtHVVrKSpHuYSyDzrNSbZoY0yN95Mt1:ZAF6EZApDfVSlv9XBx/4","tlshash":"4e446b4c626a1132f857d3b576adea5f3228f403b1adde3df94cba484f0f90864a5643","first_seen":"2026-01-07T08:11:27.008476Z","last_seen":"2026-01-07T08:11:27.008476Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":80,"dns":63,"connect":1,"send":0,"wait":65,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"billions.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/index-KuMfDku-.css","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://billions.run/","date":"2026-01-07T08:11:00.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"billions.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 17:11:01 GMT","end":"Wed, 25 Mar 2026 18:08:44 GMT"},"fingerprint":{"sha1":"2D:75:F3:D7:10:9C:F4:FA:B8:ED:72:88:AC:15:DA:DD:45:03:4C:60","sha256":"3D:7E:B7:F4:B8:14:CF:60:79:6D:4B:DA:E5:8E:A1:A9:13:81:A1:8B:7D:F9:D6:2A:7F:A9:C0:BA:79:A7:AF:7F"}}},"request":{"raw":"GET /index-KuMfDku-.css HTTP/1.1\r\nHost: billions.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://billions.run/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 08:11:00 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Thu, 25 Dec 2025 19:04:44 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"694d8acc-9aeb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mx5vitFkYe1yult02W6bQWv0dNxJfw%2B76ITzgBYbOxuCfwkGZ%2B1SsS9BxouE9wDrWSp9jUtP4UtlEZeM4CyTOO6O7rr9MXhaGAI%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ba1fb5f7b57b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39659,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (39658)","md5":"9d47eeff0743b5be2f3f226506200789","sha1":"b8db1b691cefaf34566879bfe771cb56999e5601","sha256":"55b4efb1510bef62c4bfc1f665ee65ab090578390578d68b02a6d63f3d4f9372","sha512":"befa5196e670df3d96ca38d97ac67f893370247e08775c934415072006c72d2bdd1ec0e54bf9a2dfa5ed38dfe625dc26a3b8f844d108efc247f56b1d75a4cdfd","ssdeep":"384:aVRrBMSQGQf56ed283ZcW23qWF7O3oYgzQ4lY1DoKPFEINi:ErBMSQGQf56UJyYgzQIWoKPFEwi","tlshash":"140385097e5d3b397913a32540c0989c520b735bde7e47a7aca1336c9e8d78432adb39","first_seen":"2025-12-31T12:05:10.101732Z","last_seen":"2026-01-07T08:11:29.868765Z","times_seen":4,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"billions.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://billions.run/","date":"2026-01-07T08:11:00.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"billions.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 17:11:01 GMT","end":"Wed, 25 Mar 2026 18:08:44 GMT"},"fingerprint":{"sha1":"2D:75:F3:D7:10:9C:F4:FA:B8:ED:72:88:AC:15:DA:DD:45:03:4C:60","sha256":"3D:7E:B7:F4:B8:14:CF:60:79:6D:4B:DA:E5:8E:A1:A9:13:81:A1:8B:7D:F9:D6:2A:7F:A9:C0:BA:79:A7:AF:7F"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: billions.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Wed, 07 Jan 2026 08:11:00 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zKw3NhW2pi58phiGnVNiQ7L9BQ9%2B%2FSlBn2tZxCQTnNWoqvzP8QURFFfluOK8Yf9QecVpZqqtNLBw0%2BqpOcEzUlrOcIYJ%2F7ril3hwksHINtCMQRrMhmWd8rkOalCS1bU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncf-ray: 9ba1fb618b6fb4ee-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/88d68f5d5ea3/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1982\u0026min_rtt=568\u0026rtt_var=2246\u0026sent=55\u0026recv=27\u0026lost=0\u0026retrans=0\u0026sent_bytes=38209\u0026recv_bytes=3555\u0026delivery_rate=15175666\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=26572\u0026unsent_bytes=0\u0026cid=21c230a2006d559d\u0026ts=513\u0026inflight_dur=41\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10549,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"billions.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/cdn-cgi/challenge-platform/h/b/scripts/jsd/88d68f5d5ea3/main.js?","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://billions.run/","date":"2026-01-07T08:11:00.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"billions.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 17:11:01 GMT","end":"Wed, 25 Mar 2026 18:08:44 GMT"},"fingerprint":{"sha1":"2D:75:F3:D7:10:9C:F4:FA:B8:ED:72:88:AC:15:DA:DD:45:03:4C:60","sha256":"3D:7E:B7:F4:B8:14:CF:60:79:6D:4B:DA:E5:8E:A1:A9:13:81:A1:8B:7D:F9:D6:2A:7F:A9:C0:BA:79:A7:AF:7F"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/88d68f5d5ea3/main.js? HTTP/1.1\r\nHost: billions.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=unVnsR4i%2F6hSXQF3tlNXF0j2oZE3hv16ZxhNV3xTxHlhSrTNXScruTMLCe%2FbEomWpabjzVObcSgvoLivZR%2Fa%2BE59q1vFuoDelFybWI5apDwwvLjSo%2BUOzBx2Icd1x%2Bs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9ba1fb61db72b4ee-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1067\u0026min_rtt=568\u0026rtt_var=620\u0026sent=151\u0026recv=40\u0026lost=0\u0026retrans=0\u0026sent_bytes=144802\u0026recv_bytes=4652\u0026delivery_rate=15175666\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=26572\u0026ss_exit_bw=15175666\u0026ss_exit_reason=2\u0026cwnd=19426\u0026unsent_bytes=0\u0026cid=21c230a2006d559d\u0026ts=561\u0026inflight_dur=73\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10549,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10549), with no line terminators","md5":"9b50fee27d8a9eb587da67ce338d0b47","sha1":"3fb7420e7c14ba6b890cecb7b93814388717c1cb","sha256":"8c1682ea6ecd3a0002667a22f7849bfd2b002c6cb2095b491425d68d6e0aecb6","sha512":"f7316d4b7b34ce9cd390d3d83138b3318806071981c0b7c26833f4ad4e191be6827ba928be977b5359cd84374256528b6b8f68e1f0282597c2c06e431eaabcf9","ssdeep":"192:V4LCuwlB++apYwxOgTL+/8zhJjSjNULKLwe:VGJwfRSfvTLThJjK9","tlshash":"f322c7e3f906616cc339c065141f6dcd1228be8550089b2ae7688cae7c39744a4efecf","first_seen":"2026-01-07T07:33:02.684718Z","last_seen":"2026-01-07T08:19:39.012912Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"billions.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/cdn-cgi/challenge-platform/h/b/jsd/oneshot/88d68f5d5ea3/0.3336387455928414:1767769893:Bdwr65Bcs6rpjrUcLXsFD5fcUzSuWkJGuzHlorSFwtY/9ba1fb5dfce3b509","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://billions.run/","date":"2026-01-07T08:11:00.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"billions.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 17:11:01 GMT","end":"Wed, 25 Mar 2026 18:08:44 GMT"},"fingerprint":{"sha1":"2D:75:F3:D7:10:9C:F4:FA:B8:ED:72:88:AC:15:DA:DD:45:03:4C:60","sha256":"3D:7E:B7:F4:B8:14:CF:60:79:6D:4B:DA:E5:8E:A1:A9:13:81:A1:8B:7D:F9:D6:2A:7F:A9:C0:BA:79:A7:AF:7F"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/88d68f5d5ea3/0.3336387455928414:1767769893:Bdwr65Bcs6rpjrUcLXsFD5fcUzSuWkJGuzHlorSFwtY/9ba1fb5dfce3b509 HTTP/1.1\r\nHost: billions.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12151\r\nOrigin: https://billions.run\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://billions.run/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12151,"data":"NgYuF-ihv6+7i77D8Jc74c6cX9cwcxu92suv8czutJvRJD2RGc5uNJuUDc0cSSc8XShc$Zv10apsvTRWpsc1PPi-uiotvAJij6tmJLRaf-6YiIwmfIU+zZucDzMaruugLcJyAnhRciGUf1-YEctf4rAYRY0UTMuvXepWi7XCLYGCzYLHc6-f4UzU$accpSfqU8zGEOuPX4aucoGsckuvWL7JcdQn6nWvNOT39kJWx5n9TkOuc7pscCOMzDj0jJyZc5tnjf5zREccASc$us-ccRQQsp-idYuiRM8g-TBdjYOucWpzuMfzUh1RVw-g0scPnZYmp8Qcc89X9qYl4snDsn6ssc2YHcrazZscY-ve1ohhxHsinn9JjxVJY5xGxxOiN8JM9o+OsqSHDCsHHuMxmCccf-ReZcuDP-R4bucLPD4VxguDgrV97DPOCP3myqSPB2hMDoN9chk2Y8sZObtf4bfqEfNpCNyNqJGx1YUkAIafo-RRzff2tzUGG5Y$aYcJ797SSu-J+hwj-ccAj1uNy3AJMbLD8UoCsDCd3MqE+fQ8Ge69E0ZhIV5gDD95bS8j98QHWymhDNSDyc+u5ZW1X7VWoBpH+nA+C7qVYqYRwfHcm0X1fswDnffZzYWnrVAnUa5iSfcI6pes0-O9Bmm5eCHf5+jUoZtsE4zJXiITFDAVe4hPPqzMMdcyixSEZVwH81H5S0lg8Od1fWl94wYfEzUus08OiopFzaC7dfpmE3H5iTyYoA8FasmXt$MR7EvDYshuc0UyWY7f68gIv9v6O8WCR8cvlX5gy8cqQ3YgjLVuAkJC1Hum88Jx-Ut8Xfk8g6--0PJvSCHrvP8qfZgcZVxUAP8LUYYq-z8gSi6CZMv9tPe-TtPmvzfZLiCtgSiv8cPZ-9Ys-fiR0iRxZJ+7WYYAMxvTDuv6gADAY9nzkHuzuiywZ-8gMqbhSXWZD2oc-CYCzuNYunBx4RZEkYMvDCHQWzWP5bPfxPOhauYqvNZas-YIVbEnIY-oTP9jT6N6WgFIgjQPN0cGw-RWDNsRcZGsEnvPnfku1NDdonDi-E5oM-ok7ckz$IMPSvqsmZmHIvhCYkj6Xo1q6CYyP3XBrjP922zG04enNisbIBscQoslSuvyhQuovu-g0sGiR8Zsk6Y4Risj+h6YyQTuQ8+96-DZMvwxSavLHsGvsmHZb7b4Lt9I4tqDqanNB$ZSv98cYYhzjTQDiGoPhiG2vebcza9dYumPMxL+-2vPRR8DwzvJsodvNFY-yhOqLpVuTQgE+PZtfgJ+qhQYcxYBFWwY9POh8c1qSAgJv9+7HPQCYyYd9JbSGF7GSdAvDkZmokDX6JR6s7Igki3cHrkzCWOh9Y9LuF7-PMauPpPxg1o6CHRAtkHXFrTs-hu6nwSXCHe3Xvv7q0dcM0T6s0+Xgsavv6Ml6gvA1-Xv61-t5MO5NVOY4I4ZusajueI46J8-t+txTWtvhjFURUVFUWDOFdACxWxAIiL0kdo5llxNoWcGfC0riBk4Os9kIYTuMevaeMMHdoYhenBl3ctBtggx++YFgu+F2UicwY6c4iPveIrOrF3SNIqdCunmzZdoJxHfcCwase47xcfZzuj0YcB-Tx1xr9Z17bcj9w1SWYL5aJc+nRc-CHmH+HDLULP+IQuALGcb+yFy8sIXdhdpLu6YYFpQ6OAI3a-VWLIv22bv98-PuWDh+fZDPaYWvzvv-vun4tzHLS$Ux47x5hoyQ+Rvg8n8gSDwuVqX8JI-dgzi0FEiSNqa-4O7d6vsqTMQfWEA7Svtsou-LavdFJi3RcZssQvauvfPahaqM-$v9LnPXOF3WnD+H9u1+G6WWckfbaWixfYzyfLLH0QykoRmh98aY-2AAvYbJJiBUXZp$9xYRiBH-1HNnWulQZWDZjG9CZPWJSu9gtBr8kSZ1zAdF-bd8PNA99DNylszsA$6v9NG0dS5Nw3zZC7JZBzDU5W7oxJpGP0Qg9dCCTz-dPmhxRx7GfWjsZhMpi4DcyfUdZ1HtvaH1yz+lvb1n6GciG9sDLHp2AStxhAQa-DEi0QHTROSrfktjphgZidkpt8v0sPspodU2N7FpnxfvpCD9NxDAUwWRXqjyta91aNqSU8LiVA9NnLiknYtoPTnWXSG+EWyk9PHWPcv7Imxs21nW$TaQ+4H8ptcxBJZkM6Takkdr-IArA-W5x1rd5gpoHO79ISNHO91ZOz6SMFO11MLiy8uLiCLHQhzZUGVFCHwWOGHCINWkJ89ytCx2djEbP+OQWdYHOep$aEkFhxP4+pBy8a4FINquyLt4bFk$EjQvL1i$SaShX3nui57YHn4Y2muZbausyS6zcW+D9rAo3PhcAHGH9JNiZQuzpNh7oYsOLieFGsdDP$wYGo8y1djNScachqJA6VN$nNkrtLv5P$sD18vcwzvg8YiMLx958cJs0j1cGZ2l8UG9Uz+ypd9Z4dwarUdObh8ZyDoYsAFEXTU9$jQc7W68bOox5p+4qLL72dlqa1S8A7tnSMwrn9qf-YAJScqDnGZfRpdJisdXM5-Yr5Ri+3sOyvJPuDnV136Y0RVSa9ZcC9UpaJNm+RxT+EnRuQ-6dp-oXTySQB71$LOEbPuc-R++$sUscWtifZ70ljgswAezaXpPYeS5cTkYWxH4iyu7YxdS+LG6j2AZMofZk6hNB8XcioArD1wjb-NZ$daNoS1ZUYgaRlvAVn6j+2suuzIIe0nw-CWMI-mN7L83SQ$nlITiyQYGuZ136giLkvq+HPLvy0FozqZkZTVetOv5sYzUdp3CDzjAEPqfPoc0fjWN26bMyNvq-eceyLiFkQ5y+LUdcO8$cCXDHFi7QttWgn8pwO3At9HgELSz4ag-RpPPrfjco6$kJlwWsiZESR9DvZOZdkiR2AyULL1UI7U23Jckt7BXYwiG19Yxubmawr+hf4FsxbSm3CD8f1jEa6-V9grvi2mP9nFYeP11jDpGasmJDY+1$u5vDriO5pJ-XZ+ekD69fuRcO2mF7GhG1bkpcMt4gpVjPtO6f6p5PjCU0Gtdveo+9s4I2iBfB-$j6Yab6HoG29PQ2Loo$JMaz5HRi4SBAOhJiQRCmOxNx$1APgfkHWGolqSwjAeD+A8PdBGi5nUPZT9YkqCn9ryTBz1H$Ipa1DYfa4I8YuyODoS7a6NZQCf-tEmA7+LaD6SAbXyGdQcLfm5rFzPwz1w0SYyNsiBaVit9wycS1sZnWXGh2ajPT$aR1U2ENNQIYu2hucd2YzasSUQa7TC2Jz$CNc88ZbPqNC6wL8TjgNB57m2t0eL$kDZwSaJ6i9+MH2SNuIElbSTl$LFRBcmg2i-2FF-STIhIsb-vuhi37O183aLtvn020Dh0bCRhifUlPQTCYL$0ZdJ8OYseIkpppytO7ccHEa+Rv82U27fliOthIlLxDyGl0YltLkLvCNDESf7JxrvyD+0vGstz0CRFiTljDymHtzYE-Ztw0Xodlb0nOfotpqGduCpP7R0fGNpsF+iY0s9vvfO2C0mi7nLy0nukChc4iLSL-shPOn-dvileS$YNGIuNvW1WGx96cN6k8g-yvOYnptci-yY4FroncBFH7c1ckMLvFJ6ZAj78DmDdlviASAHZLs6-7YuVm$9VQ6Ys0w690g9vACLjvkGpOvGYCZvjF2AZh0SfSL1uaZzFvcPMGs5caflYHNptGHrPv7-6fSNnoHXB6TpmDSpaFvAMGYDfi+S9Q2Aw0CG1vbpqYX0C1vCyGZcS+$RrLafr1Q70L3LGYPQ+SA-ElHDjNv0FotcC1P1tmwpgW5DClck4-JPsrtYs+YzvFfODL889aCDCGPWBo6hXOzYDiafZtuc6X7O9XGOLlbAgTgW3SgWc9ZRACYRipApW8PsFRJb26Rc4xzGxiZRUH4Yo76neiOmwcVxZYe1M18peo77dlNcgpv-60t-$GtHnvv9ZfxLa8SHCS9SANWLhh0Ly+Y+aRuTSOs6S-MmzcRQwH7rPFS-vbLlU-kNZ7J+rpG+CYOl2-vNwcNQ$Q6+Hx9m4mcht1SCVDdn4pZ7vAIQ$G0SDcAf4heGH+4zNonAsAga2C2cNuCGtDjC7YZfYNQvBuCGp-qNnAat7$pOhRvt7wDHkDl+drNmDpl8gck9cnvv1Gj1nFdsAJs0s6r645j-vtDbgvAC4-ZSIHYvZ1ZRjYI-AanNDrYx4YFC2p$Od6mfZYZY49yOsm4Qd1RiGCuW3Yb-fRiplGZ0lmzYNpApvTdn9-ANgFeRvCVLZRRiStuv+QHtI9Y9ZHhFNmUXsxyrmGs62o4fMAavkOD-ZQhfsxGu4JNtXXWTN-8P6a4H1aATi1yfZFsx1T5LdHYadWRRkYzS48xFou4c5Q4ACDjtB+UbcNmCYxr93hRQJX6LtHWPfv0k$0CupGZcmudLy6uRv6op8W7198aorpfA3w8u-avnD64fS8xNTbvoqLHPGo9b7onoQ1MH1hMLzmZu414YND-pY93hAwEWuTvc6bXrv6IGHA-XsS4tu0eG8DPtc5s5LQEPDTmucwEXWAZ9RtztPaEwrlrRzbxfyWV6h-bP+RbXlfbT+Q0JXYafH6TpAmo9JFzYX0GpZHJTPbwx50N9RXi$kRiz7$7-GSrCXujS7zyxfas+ZxH+pP7QW5tc+-NFufyRPuCSircXI9fxysG$60k6Y5IAYaO0k00k--cvAxsfjY2keLp7ZtrSfkB7PL6wsx0W-hPllHVOa06-rokFtfOcBvd$qhvhZbHGvvmCql7XnQI61b6psP7Q8a$uiov0$NZ+$0m1nF+1y+hF6CH8ku2O-DUmrSg0Yz3$+72CGk5C4oxp37jOt8T7IP2RJ12NeS2a7GDxzOuxCGc7Gzv+MRvsHmH+7zgWvvrfSf8-JbDQ$G2zXro68G1F-fgfZFzmYYuh1LFYNlIb3-AF66mfLGxFyn9SDisYLs+O0rUoOY9AtCXowi8sF7SO4swQufSJn0Rl-5r04xD09lxtuAyb1HN-DiP9ZvqrxYIa-uxcIG9iqPvrPirDpbxP7Rfk6aEwDD3rE7Srcnyri69CvhSTkctlw+abSn9soNI7jWON7HbHWSyrNcYNIl2PEP5PvvOc6k3+lSHx+XA76A2Sx$DmnLAr20yhPSAFDYpmzXcDC6PHaJfrWb2cIwLHQc4Q3uxv+528D828gNxt5H3lwHscrOa82XV7oX9rwXgz1aOWsG496SMD0wdT5TkAAL--O9qrLXA-xW7WwRCOoGYfHt0TakyhtOeRfQsAY66f6vBnDvz0o$BJXc$mTHX6WbkAtFphia$SD6DazzPJQvZ06P7lR$7Q$lyciDiHstZhbnlD8P6hJA6kwmXlkY4iNzZQziV6TkNW$lXG-mW$snyJNoyRM+2GDnDv1lE1T-JJQzFGQXA$-5iTSmn79ixwsYqO7fOp8TFfLsXPE-Yut0Sax$JwacSP81MxASeLHxAmwhy7nwztQCgWslNtAWk1k7lFj-1rVoxXPC5vOQGANoV$9YU6UAd5vPvlvNc5s88GkYBfHxri9PGQMl9wHJUweLjcwW4FDPUXblvrLwdhIGvCXPoG8OrTwRfmnokQ-ooP8k4SkPQ+6fMFBP5$sUqxAFCJzTCpvkY8sO202WAvm87G4xS+k8TR4+61S9eptYhbToPPMiMLyT-XavVTYkH0-1YVONsCYJIknG0wsx+adHnCdROY-TSN+QEPmRvsvXtvyvy04tf-OvkOkaQ0u1+tYFgVFSwOEWvvWXv+$Gp1B$YAvHB9yl7siO-f9p88HelWcYCaz8MSY3g6m9jN4GJ$9C7fimopgkJjhtvtdLwr4bgpt93P4$yC3hcIQXOWsODQmnaJ8XSrQkasjr6DkaDxH+HFf-$bjD8JYIcRsXnhNbBuep3OT-m-313S1Xbh+mqb+7mvtYNO+l+lHDnGpu+wTl751TTJn66BHFH+GnpbjLSYZxvazwDpWFoaEhnclfsv5Y66gbtJQvOvJ$cQ4-J5mnYV1nD+qQOHR-3TDPjvkpMbTHHhq+HTJ9ktb5szsCs5401QuQYvFFMF2XSN2Hgd8XUrmb$RR8qc42$7gtBQEwZsd6r52xZCHwja4uMn9SeLzrLsePWLLGOxI-69HBdF6JfsxLjv7JSQuEYEhMYfhU6y0TQPYAChJx2a$wy4huFJo6oxih2bTRM$MXaY-gNGya-Qzw+p8C4BnmH+cEsclwCCpnXJXkz$nbdBkTiGdjzkX1syw52JRlC0CcygR-YQkGIxHYNmXHk$zHtpjrQ$pyFrLHGbkaB7SbX-yYN7po6O6-YY6exwzvScRGb5PEmLjfIuXpc5pJjamGsrNthY4YZJYyP0qCXXOlpPmn9DPePt2XwD2nMW8JPrmzYdkPjJX$TrPYzHnYpTqlTuys6Z3l8R7VqX+SbXW+FO7mbW8TfrewQ5bEZakGhPV$UlSDtAa6ekpR5vYYJ4J8VwcWaWYY98OQ$mA5scMS2PO-v631aGI6ZvORqisdqFh0IzLS4YwTl5vvHI1g4847CnWJk5WZOWP4Z+Ji3$bjhoy6982xv6+53LgtFh8j-DgT9M$5rLHxhEu2udVNuIrcf7dRIO8TFDJN66JFBWk7Zj-omksIRMpQyZG1jk84o6F5i4kXkY0rwXAuFPYF8baLGF4m8mYS2f7PNQMwjz2wsc4DbMYWA+FS2i-rpohRrkABhVEJbsYn2Prmbo1M0Vf73uJvkD-HsvYHMx6tHBZwWHXaX54rL7dHYd7oGdCfEw8rbfLDy0x1q9DMiXkSJyZfxbZwbqTqL3lYnhPR634JViwTgePIyJ1JA7A7D4Hj6Ds$iyJd$mC$XzFzQ17OfSja8Iqbr1w8sQ4YtGYxlTy29CW1UDQ8D8Tz5HnNGkfDv26yNJU8DdP9J6IqWWsGpk5FRseRxIU4id4xiwQlQDA2lrzgL5ATT$dGoz6S6SbS1g6UWi8wYflD$yxrx0CR6M4QdyVoT28HaF7ij8vUzWmb4C9lmwVrd-xzGOfaEa2rfM42Bm3o3QDguT4+mf9N4OGYfzY4fhTD3kH+ZEwt+S2Ao6XZ9bR+nnADsk4jzbwJ9CZZxfgg$pYCVGTy1IDbDxTBr5vlwfpoUMImhuLWPqJwd3Hlh6TVQBPu8XHTPlmh21gisdQTA1Wd-9q2q3M6ad$3aV54clLLXg4tsSkrYYf5vF$vG0FUkRmTN29F5rYNHb2-UsizJIlm3YkJoMQHTa2lv19j1RHTvFfOmpq+iRoAAIdAoCgRXhGBC7qrbcAc2qn5-d5JDYNS3$FCAnYYpPjoFSrxAfgtY6xx2xlsqZb3GEBLGM2inwYOGM7LR7V2sAgr3LI+YMY2ScHj4tRVxJ4fIm3XTMZ-RpTrbJ3JRuUdkD35GHnfvDnvyE9ERp9g8y6DyUtFylyHR1LJ+3nisXAnyJabMBMVwdcvQ5yYpE2deG2Ey7zh0oJeiIexApgTt48SUPur6nDf$$tIN1jJaJ1aqlFEvRx3PS$d7eYFPJYPnn9mFh2is$AJ99m34F1-Pwzj$1l24JL90S0f7Jiu$YqB-tu+HAlaZ2Es-7GqCzvcb-LZ+s31uNHtfj5-gBm8yf$yovbGq1f5JTukNDxDU24Y+cxI5L8+kvJL5Y7Caf$FstZOQfP8qZzp7dMqW0IAE9ect07CR+DcHW$P5J+A1HjSf0gZE9VR7iW-U4MHTu5JCQ+mwyo38oTCc07CU+rHZc$qJZ8PSDxOizcOy5bHQCcqdvF096fpG9WPCzzfiXsc$iGcQfWcIdE3CsJtCDa8cz98DWdFu9YJ-yniXZP39hCiFZ9aReZxANy-9vozWA1uh8HWivxqHZLDuvYT+azc5iHLZlckC9AszEsHLsg8YsFSXLsqvsS76t+$mEvxvo3WsuHPvW9-6vHsRxrv-P6p9Bz1PfTTHPz-TQIcULcYiHXuF+sJvkJbc4+t48f-VS1LXZTsAP+ccQ+WLu3xHJBCM2+LWLUUPJSvWAZjvFdYZ9s+NPmHELWL-+k46uqHpOvzc1mPNCXaPFwv8LqZodAh0Fjf+7LpsGGC9Ad9ELQYkS9HTWPf+yzi45-NJf4toLlikLXZ8-9Y9L2D2vswW+ACSiTLivIuE6+$fvfyYi+qiLYb9PI3TuU9UpSt0d6-0DdHQ3L0LPkN-fuFZQkHCsAwOTDA-9-gzXYIUAQ1E8qzEbWF$d8x9f+BiU9SMJHsviSuxvsHuxb0NxCE+yQDPgdrDb7+Xa3ZWyMun8-d0XvMgyJ9HdkFI-Ci-Q16LZsjYQjix-vT0Qtz26vY2uu+oLa8atx$Cf-OzY3sgx9bSvFFOfAz2TCczjCjAE$uLXsWyW$yfic-4TzZoZv8yf+dvYJCH-ZbvFQs1QUu$Hmy0ScTCiQsqaHQGfo3RsGvBdScbJ9jLDCjvOYgL6c610+8avyq2DaCx1tvJSvhqm6sRl1tmVei7PUgaU90vgvnQHzYZ0ZPHkZicu2cm9vHXyAqa1g+LmsIHPD0OUgc-RJJ7qp-qBcGsZTb89JPvNXFNQIyYHuZ8WQMYXIibIJjuFbAmCcurzOXW67qvwCO-LZYZTpNR0w89uSZSLtGNIcACTq-4iJoJ6mcrAsuzL3jJfOu8jx0s1YIsV5f2CcJx+46oX9PaY9Hc7cVHPQ8d+UME+eQcfmch8oSPTcTYLZdhtQL6fwasalL4uTilUq7cw-+qgd5vTkCE+nz7pXhnJpdmQvecVZHukcCZ+yiN-PTvmkWNfIvxUcy4dbi8AtcdWs$XYeuJZYQL4Z7a+H46iI0GikfviTf0c+Wxgi9Dui5-bntz6P-DDXB0gVtJMLw+UzsL8vqa8-7dLnw97GzguxmDVQy+MctWRcseORbGL2BduvVv7S73-L6afhebYClHvrdlc2cPpX1vwbqwRc56T1kUY2-7uT-6vxcqcm48Zpzc1fyfbZhSxqXvc-uI9lsccvD0uQYNu$JcSgkHBPrcAy$bS9s3IYv7QPsNZ1bgUnpJIdk0FYFWc3fF9tuBh9aS4SVY5ixdW96ufy9zSm3hgEp$skzXyxGhOvWZz7iMXq5TGisAGo499v+WW-ko5pntIN$8vIuXTxuFIfHm1yLZJPO7P6FQzJhrsxIPFGGu2xPc+dwH2AHWc$-iczz9Y6Rv1fBcoWk3rguZtN6fv9HzzF1$dvAfRvvISHLesDAQCZchZzzNJy$YB0Iz6BU9Qy4dOWZUCriYsSGaUa0uIVeclY3H4pr5tZZ-QcsZYn7P0i7QUfg0XgU9JZv4Q5Yh$ismhkYimCMawY-rJ1JW+qDZLA$4JP66GCfYmhfurD5+Hgc6coi9hHTvDag6ZFDcbqPCPTt4+giFzLc-HmytyCSC+ivuwH4ZxPqN+PcOu5ZJG6vSTmVsxc4Jipuf9OCSZOYNZbFHy8LAUj53D7TF1BLHG8jJRC68W1wA7uPi0$iPYd8YAbJgcOYiDPTx$8y-UzC$-ybJvGcT+1qk$-gLZxxqtHRjbYjc0Znrv7uyqY20uaZ6Ey6Vzd3-$PX0kou+17zMLJhddvvmXz7aC$SDauxCNJQuq5uXXr0XCfcvUd8cr7ZfGkNT-BGC$FJuAxbFOSNjV3MN60bMF-LMx02lXX00VtO1fio0lGnRX5Pwm7zD7GhOVYVYLiR$R$5hQs+hi0gTdrDttz3sJ8-2Ld+cR7hZYVN8dWiAikSAdtl0qaAvU2E4RUYV0IGkjQRLPNTbC0Ipxzryu$P3+rtD++jYunDzH0EPt10jl2HuA9+OAJ+ejyHI8x0hcpIgC-e2blibCkfckBjHxV2WEbCtHuYnr6nDvs8C95DWiMd3vEPmupDvmgU2OD8N0wD5DvvG2+Dpd9kyeS6c0HDL60J7x8-6FjA-4q3Wad3ZSz3JT3Wsthv0d8dhEYu0iRZ7d+Jx9p5h4-$EDJkYSAxgvVame1kSVfx4B75LbaSO80dY$Yu0UAHkcPchd6DYbzJV6Ju-$qxTmAyzef9nb-1JL-70zGCVQCH6xpHSb+a+zQJAmxqukEbCt$LCiQcdvgLTgO7QzZMxt-E0wsR4b8J9xk-ufJcHCmLAnJMh4ismz1siAF9dTiE$28WPLFPSjY70ry8x1WQRuN-RihyCdb-jILNuxRNVNQCLjXJUvjRNPOJnLj1cx3PaFYs9kNA2dTdP3vtYawkGZ8F-MeOJHAG6q8S5h-Qm7mcXRZQ2A1tGXac7PHA7vFNiGWMA7-4j7vFpxGn$+E8tNZ6pdq$z77UkjAU2XdE306RYALYnSxWHOFwFd+8ikYVD60bkc0WoHpgovG2Jp1iakdZ2sYec9Pp7-6coc2QsYC4RcnoNZxbnxbGD8jd0jAcJsA8bCtEbCPlxcPf7rtZZbmzlGnceqXPaTjuAzulRP10FS$dAFxGnv-9DZvfkuubqYucSTwtfnrAU2s48FtCd7-u$IHQ7GSsNP+Qfq72wAETkLfyLhFlLIv2AmMDTLxFeuuh22PBA9-lc3Y$Zdn$MxRkUYh0jDh9rAREx7s0YPY5eu-x8C6FmLID9bXQsSnOct$qpVH6J9pn+LCxYWRXXXoob8J2GnpSJbXOlZx6RG33PI5aNRJUGmz$cmyfgvZqefdqcWqC-8ObvSFPX9X-bWFASDXcYIo7uSHWx5SD$i$wpj3Xvfob5qpcl7o0W1pJ+lAzu84-RJpGQmgF7I2XpsCCfHi0cvI+pQ0rVtOb$j+n3h3nsV+QjIOWun46oWk0amIOWIwpRsNktjk$p32iXoRX67nbaO+69UMocDOmbfiYSLpoRPhRmnQdqI94y1c3omSJoHzxdGTsb7faMj+nfXlnn7OlqWfBIOc0xfg7NPmddx3X-EJM9nP6OkIo4Z0cNyNbtd2cj4DBTElrm5FjI9vmEJusixrdoT6WuoWcHkk$psxPvR+ac7CPswMddUqnWcO4bAOPx1szybU7ZPAp4N-ysIYX7QDxOY2zvqnWsHCuhN7IxveowzRDwcwUx2gVNPZoZMkfbxFhqnzZ7XVhFIdrvOhu6F5PcFLxO8yzzzR9ygvvIsu8zrz7NkdApny12zhipUqd6RNwpjz5HRC8ApBxDbiohJpeFWXhiXUdanJpaSSj7I5-DW7Ap-gGAmhV83jW9OlbPXcS18l+s9HsyDXcS7vSjW9OsMRXsSP8VNk9R6vZw+nWWDFzUL2xFQlI8WdF5DG-MHXWSxp4Gs3OdPGwvuFpBNww0pP+ACNCW2Fx0O5PxwWJ3dQXJpGAI6ZaNlW-$5Rl7yxpjSg+YOanl0nyFuP+bg$hUSHQcXaSidZOTGO3kDiISSbO$bypV8+wLoIWUOPZxU3NwWJjbp25S7JO8iMqTp-sfqc1CkQIo0ym4Rbf8i4Adhk1iuifp6+oYQom0xEQUvkcMiXzLY5osJsu+qu-unZPGr8p4pMQN7YZNvR7CRL4i+EnVaPrttbvbscfOvz9JGG4xbzN3ByQFs17iMsQJIMuNVT+l2PMQR3VsaAiWtQ+0c$DsuWcccCG45kPlGNhQbiaAOun7SB-X9gifuVZ4vzW0H-RipYSY4J05cJ83qkc350-w-t8C9p2pcciF6vV+Zi6s7vAg0794LRcGdfHYFugnpLPzzLAg39+hv-8AzdGx-+hcOGO8pUhcvJNJiuC2yccACZ+TccvPgRqk$ZvXYongZ$ufu9LcoI3vZcLA8khy+SMgUB5iRZMkw7HxviE58YrmrRCIyciRrmkwouWLV$u9TemXOiuiHiB5GRem5E-z-Pi45cH+ctRcjy$VE59-9JNGx1+gVHc4TpWvcCb+lSvcrh6ft88ay7iWfXuCV$gxyqwngZ8uccFWDLDLvRux$HviPwubBac5lzyvZc1sRBP4klWhCQcPiiYBccxbZic-g9LZbyRuzH6Sc1uDPSE5MDJLc-bzkqMDwIt8xSvLLbBS9xvAk6pYpqBzfs7TL9v0DLdRJO-XpNkCQ+oO45juTHCO8M3T5gsYi9y6appIDV3oY9vUG7c6c1uaumEyCkMGZc$V458cbc8mogQZiE58cF7+c8uvsc6cfT7vrx+MMnswYb0mc6vm$yQWjqxYDv9vstY9-WfJshy+h9U-Xc1c18CNt896mhiL42Hnu2UGALP8hc2H6JbpH3uYjbi4Jcc6zFVyvY9XVhkLws1uh5GzcmPaHhFeUGSE04ycQx9cTfaucckdyNcc"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:00 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9ba1fb62bb7ab4ee-OSL\r\ncf-chl-out-s: xQrpw9uFLL/SQUAoYBOBBg==$ybC+xbmrqKP3oQ/GlBW8Kg==\r\nset-cookie: cf_clearance=wCswNilgcgAnG2hPfOu8QTMmV9cu9tYlpqV67AXJMbw-1767773460-1.2.1.1-7BJTmmXPIAaw8iL._RF205kwq24.t3PRDK_8hpN8Vbi1SMrScRwE74J.8EcdSWL8StFWpLKsIWYP3nOIZJ7pULqAgTr4LUyi4LaDDxKozzTXSLRVLYOPnFIPVIw2vSqNoYY6MPvJzuPJSVV7kL7KKm.o4hKvciUsTcBiOwHNR0iBxBVeG0xegUWDdaZAgg434R2LMmADPmC0tLhJtIzlE0xPNclKQIPi02tanDInaSc; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=billions.run; Expires=Thu, 07 Jan 2027 08:11:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8uid2JuwfatngKVZhHVtIUJJoS%2BwHoocc4MWFQlV7XzvyAaxkOnrMkScz0Nai%2Bk3r%2Bt%2Bc0EEt%2BpfXIf5toTHZNhtReAize0WExYyht3TXInsAFP2i86gXpdbJFuFLSY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=739\u0026min_rtt=517\u0026rtt_var=283\u0026sent=720\u0026recv=157\u0026lost=0\u0026retrans=0\u0026sent_bytes=790355\u0026recv_bytes=22999\u0026delivery_rate=26491820\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=26572\u0026ss_exit_bw=15175666\u0026ss_exit_reason=2\u0026cwnd=46565\u0026unsent_bytes=0\u0026cid=21c230a2006d559d\u0026ts=703\u0026inflight_dur=128\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T09:31:00.786811Z","times_seen":16480402,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"billions.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/slick-1.8.1.min.js","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://billions.run/","date":"2026-01-07T08:11:00.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"billions.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 17:11:01 GMT","end":"Wed, 25 Mar 2026 18:08:44 GMT"},"fingerprint":{"sha1":"2D:75:F3:D7:10:9C:F4:FA:B8:ED:72:88:AC:15:DA:DD:45:03:4C:60","sha256":"3D:7E:B7:F4:B8:14:CF:60:79:6D:4B:DA:E5:8E:A1:A9:13:81:A1:8B:7D:F9:D6:2A:7F:A9:C0:BA:79:A7:AF:7F"}}},"request":{"raw":"GET /slick-1.8.1.min.js HTTP/1.1\r\nHost: billions.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://billions.run/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 08:11:00 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 25 Dec 2025 19:04:44 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"694d8acc-19971\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5sN8TeHV3tlhinnx9pDEjCSqyrFVGUODJBEjFsFt3SJs2AGmwRaVDGnGSlYwS0VWrPcfbOyi9Zkjx6iez81z6PkfTzAtFuakoXc%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ba1fb5f7b58b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104817,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8fe49a2984ce8aebf2cf4a3fc542e854","sha1":"21329602c6d027a125589c601cb942e1ef989915","sha256":"95f7742649b3d9892f4e98a81564277c78007a1226c74823830f1fbf570d4602","sha512":"c332b2db9ff5ffeec1b6caf9be933435d062fee1201ad14874bd6ffa173c9b299d246a9eb2639f936417914a4e246ff2fa1f9e009d97aacb0f1c51ded6ec559c","ssdeep":"768:A8xvWc6xnMVrzT/VyrHn2Qb7tMjzai2WAR13QL2jRqh1vFcYZiWcTcLcwcqcecnw:AMhVyRbxBxWAR1AL4i/N8UCw7UGQNK0g","tlshash":"50a33ed6994bd0e98e5111ddd077ec18e0680963cdacf193ba2cdec2b42ef66c44763a","first_seen":"2025-12-31T12:05:10.091651Z","last_seen":"2026-01-07T08:11:29.869841Z","times_seen":4,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"billions.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/sign-in-background.png","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billions.run/","date":"2026-01-07T08:11:00.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"billions.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 17:11:01 GMT","end":"Wed, 25 Mar 2026 18:08:44 GMT"},"fingerprint":{"sha1":"2D:75:F3:D7:10:9C:F4:FA:B8:ED:72:88:AC:15:DA:DD:45:03:4C:60","sha256":"3D:7E:B7:F4:B8:14:CF:60:79:6D:4B:DA:E5:8E:A1:A9:13:81:A1:8B:7D:F9:D6:2A:7F:A9:C0:BA:79:A7:AF:7F"}}},"request":{"raw":"GET /sign-in-background.png HTTP/1.1\r\nHost: billions.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://billions.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 08:11:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 660784\r\nlast-modified: Thu, 25 Dec 2025 19:04:44 GMT\r\npriority: u=4,i=?0\r\netag: \"694d8acc-a1530\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a9EancQcgNLzr4hyaw4KEjFpNoiG14h4v%2BFL9umjvy%2FIdk%2B%2BAmoklEqYk2IsArz47U2Pf8kUKloS1PAVk%2BLZLH%2BHvO4sgPW8cPE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9ba1fb614b6ab4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":660784,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1240 x 1240, 8-bit colormap, non-interlaced","md5":"3ed25b9288a7c2ad700a118e1a51945c","sha1":"023993da86f15d16b3371006855d63d92b2bed1e","sha256":"e938e414be0f3fa2a30388a54c823be85a32f367115b5782b88269de063aa0cc","sha512":"f9ea8c87e0bbb2e2fe80d24ebae0d918e8f57cff8b33fddcd0204244babec8a9f2cdd61dfb19ecea8337d2652dbc9ec41b9529371129050104448ab169db75ef","ssdeep":"12288:4aVkM9EtTRe5YHrPLyko9CvYYQn8kBFjWwhPk6dilykuE/Y:4PXUYLTykiCvYA4YG86d8YE/Y","tlshash":"73e423ecd32d2e00f55527eb07925e53954268f22aa04a108dfeb095cf9e3693b5cc9b","first_seen":"2025-12-31T12:05:10.092515Z","last_seen":"2026-02-09T14:25:41.915347Z","times_seen":6,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"billions.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billions.run/Matter-Regular.woff2","fqdn":"billions.run","domain":"billions.run","tld":"run"},"ip":{"addr":"104.21.63.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://billions.run/","date":"2026-01-07T08:11:00.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"billions.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 17:11:01 GMT","end":"Wed, 25 Mar 2026 18:08:44 GMT"},"fingerprint":{"sha1":"2D:75:F3:D7:10:9C:F4:FA:B8:ED:72:88:AC:15:DA:DD:45:03:4C:60","sha256":"3D:7E:B7:F4:B8:14:CF:60:79:6D:4B:DA:E5:8E:A1:A9:13:81:A1:8B:7D:F9:D6:2A:7F:A9:C0:BA:79:A7:AF:7F"}}},"request":{"raw":"GET /Matter-Regular.woff2 HTTP/1.1\r\nHost: billions.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://billions.run/index-KuMfDku-.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 08:11:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 31396\r\nlast-modified: Thu, 25 Dec 2025 19:04:44 GMT\r\npriority: u=4,i=?0\r\netag: \"694d8acc-7aa4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o4UcxjpxbLjqxHEhCn8QotTCELYTYvSu6L5JHzm6RjOBT%2BEAyAOEdPLDopnYKr252IDr%2F7W9onf5WGLGjwujR0lyL3sLSuxDCfA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9ba1fb615b6cb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31396,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 31396, version 1.0","md5":"57db55512047196ca7aa4fece0769e1b","sha1":"d7f18c0f652282864acdf8b3c00b7d4a51644a85","sha256":"1c29913d362fe22c0b5030b95c53d2c21faeb9410fec8d695b66b0007743ce0d","sha512":"645c6be9c03f6afa0ec4220df112f4bb5b02dc9da272cd520ad169c1a044d2b42ce671b7219767fcfae14a69e879d21620fea1d81ec9b03db1812dc046431ca3","ssdeep":"768:hZ35Pcp/7ZjxE003OWW9H3OcuCmKk6irvd:L3tcp/Fjxtrr/Bip","tlshash":"7ce2e1bc061654230c528ffac4f9d18c020a9ab9d3756d767e322b6a4ec65f7ed140f6","first_seen":"2024-06-13T05:08:05Z","last_seen":"2026-06-15T10:03:00.358288Z","times_seen":131,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"billions.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"billions.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
