{"report_id":"ab4f41fc-38f1-48f4-bcfc-3e3623a9e3e1","version":6,"status":"done","tags":[],"date":"2026-01-11T09:09:31Z","url":{"schema":"http","addr":"sastatus.com/","fqdn":"sastatus.com","domain":"sastatus.com","tld":"com"},"ip":{"addr":"172.67.167.158","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sastatus.com/","fqdn":"sastatus.com","domain":"sastatus.com","tld":"com"},"title":"SoftArchive/SAnet - Availability Status + Mirrors List","dom":{"size":2596,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"2c52152988d1c69451dd8b70d4d4f5a5","sha1":"167da8e3751da873da7785e953ff4075d49e81bd","sha256":"89d2357317879515661236bdaa3c4f9f72911d0c26efdd42951c4791927acc82","sha512":"e87daf44128874466807de69995a6d2f5aa822ec721038fbdbbe815a326c064099fda02c636df65489eb8b9d5aa5fbc239667ff392b8881a5b9a976cbd6bcfe5","ssdeep":"","tlshash":"cb51a96372f9200f232192880c96b22cac53519b9a9d7e91b0ad0c8f7f42b938c1325f","dom_hash":"domhashb2ee4c18d81754fab91a5e8d5dbc5a6d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sastatus.com/","fqdn":"sastatus.com","domain":"sastatus.com","tld":"com"},"ip":{"addr":"172.67.167.158","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-15T09:09:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"sastatus.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-07-05","domain_rank":0,"first_seen":"2017-03-14T13:05:32Z","last_seen":"2025-11-15T07:26:53.682981Z","alert_count":18,"request_count":6,"received_data":43645,"sent_data":2724,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sastatus.com/","fqdn":"sastatus.com","domain":"sastatus.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-11T09:09:09.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sastatus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 12:55:32 GMT","end":"Sun, 08 Mar 2026 13:54:15 GMT"},"fingerprint":{"sha1":"94:FB:9B:D5:FB:F4:55:5D:7D:77:B3:00:10:27:C1:AF:01:CD:5D:B5","sha256":"6F:29:DB:FC:18:75:4D:A9:5D:EF:1D:A3:EA:5C:5A:1C:E2:F3:A0:51:EB:7A:DD:69:82:94:A1:94:BA:08:9C:71"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sastatus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 09:09:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N7cJj8rlwKEu4lkrKCxtR2oJrvc4djtucZOc8JI%2Fn1h2FK2kPFWFf%2FNpbMthmzGuMXujBq06kK0HotKCqOAHuhOG3A4u65wERokFaQ%3D%3D\"}]}\r\nlast-modified: Thu, 10 Jul 2025 11:51:45 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bc3460dddbd0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2631,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5f5bb9f9fc49b71b52b42ce0a24f102b","sha1":"0c4505cc45b3146799013681ca5eeca1e81f0de4","sha256":"d047d6d056e7bd16b6f0dab495a08604d61a78d99ef7e80d902412929c644e2e","sha512":"2ad1cd0fd2f5e64e3b3f0907ee9af688f21c5e3ee9bfbfde88fb072938fd55fa9e371befab2610d409d89b9939bdfd7c14159108b307107077e231c236fdbaff","ssdeep":"","tlshash":"d851ac6376f9200f232192880c96b22cad5351db9a9d7e91b06d1c8f7f42f928c5339f","first_seen":"2025-10-08T09:42:27.659284Z","last_seen":"2026-02-23T20:34:20.175122Z","times_seen":5,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":93,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sastatus.com/style.css","fqdn":"sastatus.com","domain":"sastatus.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sastatus.com/","date":"2026-01-11T09:09:09.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sastatus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 12:55:32 GMT","end":"Sun, 08 Mar 2026 13:54:15 GMT"},"fingerprint":{"sha1":"94:FB:9B:D5:FB:F4:55:5D:7D:77:B3:00:10:27:C1:AF:01:CD:5D:B5","sha256":"6F:29:DB:FC:18:75:4D:A9:5D:EF:1D:A3:EA:5C:5A:1C:E2:F3:A0:51:EB:7A:DD:69:82:94:A1:94:BA:08:9C:71"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: sastatus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sastatus.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 09:09:09 GMT\r\ncontent-type: text/css; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 20 May 2019 18:32:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yvcm9f4d2r%2FM%2BNLFLv%2FhlKVvubGMkFLqzNqYw8fwrnIvJnfhEpTH24QgSGUUmOSaVwSK%2FHH3r7coCwZMC9WSvwNDDhd00HtWahk%3D\"}]}\r\netag: W/\"bu8elf86dkq03px\"\r\ncontent-encoding: br\r\ncf-ray: 9bc3460f6c00b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4821,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4821), with no line terminators","md5":"485b0423c85ac34894f073c02b593d6f","sha1":"3412e2aaa4bd1fc14ba8e35090f45326c7eee10a","sha256":"6b09514f2acccdb0ff12627ffdacf7f6375a7a45c39b139d94f0863aaa52cf4f","sha512":"4251146dc078a746fe961786bff994f61c7e4be7e57cdea25e93ce3c9ae18f8d6bb89d20b1834e26e22508e91d63dea355bc84a882714f371f32757cb6406a7b","ssdeep":"96:gZEzoNl/A5/At1xIfirkc7k0fg9ydFDFgS6eqKZo3OKi:gZ4oj/A5/Arblfg9ydhFgx+2Ol","tlshash":"84a1b44158a6120ce6a3ccbf01847625f89ef494884b467ad4fe3934eec3e8893e370c","first_seen":"2025-10-08T09:42:27.660465Z","last_seen":"2026-02-23T20:34:20.176363Z","times_seen":5,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sastatus.com/softarchive.png","fqdn":"sastatus.com","domain":"sastatus.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sastatus.com/","date":"2026-01-11T09:09:09.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sastatus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 12:55:32 GMT","end":"Sun, 08 Mar 2026 13:54:15 GMT"},"fingerprint":{"sha1":"94:FB:9B:D5:FB:F4:55:5D:7D:77:B3:00:10:27:C1:AF:01:CD:5D:B5","sha256":"6F:29:DB:FC:18:75:4D:A9:5D:EF:1D:A3:EA:5C:5A:1C:E2:F3:A0:51:EB:7A:DD:69:82:94:A1:94:BA:08:9C:71"}}},"request":{"raw":"GET /softarchive.png HTTP/1.1\r\nHost: sastatus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sastatus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 09:09:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 200\r\naccept-ranges: bytes\r\netag: \"bu8elf6bp0uf5k\"\r\nlast-modified: Mon, 20 May 2019 18:32:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IF2Pc8d2ZrBeJg%2FoDOhWHLyc%2BwY9vcy4NihRJBC%2FwzOCOJvGmwl1rB9EPemAnlLzK1%2Bb%2B68Wu3FKa9oQO9Lz0rHbhexSg%2BRY2eQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc3460f6c06b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 4-bit colormap, non-interlaced","md5":"b4fbaafa191109a42dbbea2259ee6b2f","sha1":"856acc287bd95f2dbd967b56928c42dedb596930","sha256":"93f88e1e533f284ea491de34f5c8f8dc03ead3a92446ad7949818f4cf3c14e65","sha512":"b94765d5e64b2d0b3b11b63ce700ed4a1929e60c6f15bbc934847577a4a2cd8d25b16a851c8d9e1425b0d50f805c13c785fb6ef231822f757c9263912587ecef","ssdeep":"","tlshash":"1cd022b762040e28cd92c17a8628900e8a163164180263dba0048fb54a840f0e592133","first_seen":"2025-10-08T09:42:27.66166Z","last_seen":"2026-02-23T20:34:20.177632Z","times_seen":5,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sastatus.com/favicon.ico","fqdn":"sastatus.com","domain":"sastatus.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sastatus.com/","date":"2026-01-11T09:09:09.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sastatus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 12:55:32 GMT","end":"Sun, 08 Mar 2026 13:54:15 GMT"},"fingerprint":{"sha1":"94:FB:9B:D5:FB:F4:55:5D:7D:77:B3:00:10:27:C1:AF:01:CD:5D:B5","sha256":"6F:29:DB:FC:18:75:4D:A9:5D:EF:1D:A3:EA:5C:5A:1C:E2:F3:A0:51:EB:7A:DD:69:82:94:A1:94:BA:08:9C:71"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sastatus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sastatus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 09:09:09 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 20 May 2019 18:32:31 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xHrRXr3FRu4L4TT0P25m9zgCv35EYWrH8qSEZ%2BM7kcWev0FB6MSiZKSyE2%2BPl4Ky%2FGoAwQ%2F3ogtYAeEtELo0NNAcjSRYLzp7lrg%3D\"}]}\r\netag: W/\"bu8elg0k1gozvy\"\r\ncontent-encoding: br\r\ncf-ray: 9bc346101c93b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"041e9ea5c120876dae2c2130a986ed0d","sha1":"896d5ad4da1e4b40c932e419d144375df267f8fd","sha256":"7a51c36a3fb2d004a0e2d19f677b097f75e2d088aa459add1e476d793b4b8215","sha512":"8ddf4a8c3cefdca83c7430131aac7e161197e61019ab581d15ff6c1d4fd00bbfa114e35b8825fe61558fca104f94e6f567c0bf3311608dcfc7d716dd2a8531e0","ssdeep":"","tlshash":"9021d21bb164e803d350bbb3721b7f5484d99e394d2b11189a7ab80f2ebd04d0953542","first_seen":"2023-05-14T18:55:23Z","last_seen":"2026-05-17T01:11:25.149127Z","times_seen":68,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sastatus.com/roboto_latin.woff2","fqdn":"sastatus.com","domain":"sastatus.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sastatus.com/","date":"2026-01-11T09:09:09.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sastatus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 12:55:32 GMT","end":"Sun, 08 Mar 2026 13:54:15 GMT"},"fingerprint":{"sha1":"94:FB:9B:D5:FB:F4:55:5D:7D:77:B3:00:10:27:C1:AF:01:CD:5D:B5","sha256":"6F:29:DB:FC:18:75:4D:A9:5D:EF:1D:A3:EA:5C:5A:1C:E2:F3:A0:51:EB:7A:DD:69:82:94:A1:94:BA:08:9C:71"}}},"request":{"raw":"GET /roboto_latin.woff2 HTTP/1.1\r\nHost: sastatus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sastatus.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 09:09:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15344\r\naccept-ranges: bytes\r\netag: \"bu8elg9oor8abu8\"\r\nlast-modified: Mon, 20 May 2019 18:32:31 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GvGrNxihw9gz96fVqj1T8ZPJz3yGAmaYwmUabNa8ZkON3aLUsExU5CMA0t8olpaHvDimGjYQgCmrpZmocDYC2MajqzrUeHZAkKU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc346101c94b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.321001Z","times_seen":540720,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sastatus.com/roboto_bold_latin.woff2","fqdn":"sastatus.com","domain":"sastatus.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sastatus.com/","date":"2026-01-11T09:09:09.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sastatus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 12:55:32 GMT","end":"Sun, 08 Mar 2026 13:54:15 GMT"},"fingerprint":{"sha1":"94:FB:9B:D5:FB:F4:55:5D:7D:77:B3:00:10:27:C1:AF:01:CD:5D:B5","sha256":"6F:29:DB:FC:18:75:4D:A9:5D:EF:1D:A3:EA:5C:5A:1C:E2:F3:A0:51:EB:7A:DD:69:82:94:A1:94:BA:08:9C:71"}}},"request":{"raw":"GET /roboto_bold_latin.woff2 HTTP/1.1\r\nHost: sastatus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sastatus.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 09:09:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15436\r\naccept-ranges: bytes\r\netag: \"bu8elgo8m8jrbws\"\r\nlast-modified: Mon, 20 May 2019 18:32:32 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YJ4x%2FWeKobzXb7Ovz1ldZM7aqL51Q28ou4vqQVKNKMANiAPWgVHr01a%2BsDpIIeluaz2kKoVVk7cd46OsdZNWPEPKb3pOyPOGPHs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc346102c97b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15436,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15436, version 1.0","md5":"037d830416495def72b7881024c14b7b","sha1":"619389190b3cafafb5db94113990350acc8a0278","sha256":"1d5b7c64458f4af91dcfee0354be47adde1f739b5aded03a7ab6068a1bb6ca97","sha512":"c8d2808945a9bf2e6ad36c7749313467ff390f195448c326c4d4d7a4a635a11e2ddf4d0779be2db274f1d1d9d022b1f837294f1e12c9f87e3eac8a95cfd8872f","ssdeep":"384:uJ/qNyGt74AcZEG+69hFFHDJ1CggakKt0y:+q/kAc+ohFx9YgB2y","tlshash":"6e62d017f1fe5110ded279ba7e4f003b18e194e6eb308ab8412789266e4c18dacf8d35","first_seen":"2023-04-07T06:04:51Z","last_seen":"2026-05-17T10:15:58.408145Z","times_seen":8275,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"sastatus.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}