{"report_id":"ade71559-c329-40da-bc6e-9482884557d6","version":6,"status":"done","tags":[],"date":"2026-06-01T19:26:15Z","url":{"schema":"http","addr":"v2oauth-verf33wd.cc","fqdn":"v2oauth-verf33wd.cc","domain":"v2oauth-verf33wd.cc","tld":"cc"},"ip":{"addr":"104.21.7.111","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"v2oauth-verf33wd.cc/","fqdn":"v2oauth-verf33wd.cc","domain":"v2oauth-verf33wd.cc","tld":"cc"},"title":"Trust - Crypto Card","dom":{"size":13277,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ae674aa871dafde9749ff382d832a0a3","sha1":"cb7e5a0a0a61f4f351f79a6dc8a699f038e8733c","sha256":"f71e6cb81d85a9a5f112e5dd974faf309a6127b2c494234588e938a33ea96bd3","sha512":"8ec85f360c6663a298e5f32b7aacf7d50fd368502e17406a923f2824520898acb8b42ca1fc981049797a8b99552c56c6520ca99b20334b96a3df09b87d528df4","ssdeep":"192:1ZSTNammlkZ1JirS0y5be+gvdmpV6py3HHxxDAyXtxx8E5jp8mb1f:6TNskbYm0yE7hQXT0yXPNpdpf","tlshash":"f95232129af5963b11d342a079b6a7d65fa1e413e34a1480f7ac07cc4fc7dcad9a314e","dom_hash":"domhash94c29a8071bf2af5f2a2206c404722e6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"v2oauth-verf33wd.cc","fqdn":"v2oauth-verf33wd.cc","domain":"v2oauth-verf33wd.cc","tld":"cc"},"ip":{"addr":"104.21.7.111","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-06T19:26:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"v2oauth-verf33wd.cc","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":18,"request_count":6,"received_data":63650,"sent_data":2774,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"v2oauth-verf33wd.cc/logo-two.png","fqdn":"v2oauth-verf33wd.cc","domain":"v2oauth-verf33wd.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2oauth-verf33wd.cc/","date":"2026-06-01T19:25:53.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2oauth-verf33wd.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 22:36:29 GMT","end":"Sun, 26 Jul 2026 22:36:28 GMT"},"fingerprint":{"sha1":"75:1D:BA:69:91:5F:BA:9B:A1:04:E0:28:B5:0F:F7:D4:F9:83:20:1B","sha256":"36:0F:F5:4F:2E:C8:EF:93:E9:80:99:0A:01:17:6A:7F:40:A4:E8:6E:33:16:70:AC:C4:29:F8:35:D0:DC:2C:3A"}}},"request":{"raw":"GET /logo-two.png HTTP/1.1\r\nHost: v2oauth-verf33wd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 19:25:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 4159\r\nserver: cloudflare\r\nlast-modified: Thu, 14 May 2026 19:44:33 GMT\r\netag: \"103f-651cc534e0a75\"\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dWe6G0c%2B8eFPjQPeLI%2F6ZRnhNbknt7PD1JiBnQYlxrUOCcl6vWYKIAOiWOKafs0lvJC%2B1LNBn9QY3bvHjWq%2FtqJyOEcw%2BbZFt1gMHlgrotvVXoG9GIoWivU30wXuKIgbE55zQZCL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0509b571b3456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 71 x 81, 8-bit/color RGBA, non-interlaced","md5":"58fd2a12f571cafad976ed5feddeeacc","sha1":"c7c0342c9edb1d20d96f26c0d713b83c4124b144","sha256":"98e40eaf5f022cb4f4e94991a6fbcc95a11f93545c1354237b2f40cca4d9405b","sha512":"399b57f3f371f14c98a8a1600ba028f721739d76511e2c1476aefb46f212cf58dd9e9142eb0f77e160644a9fec03d32405459658345912457fc19304aad69a70","ssdeep":"96:taIF26hHzU/RmovWsHQOJ9SNnGFHUikhpeuaeJNGYXRfCK0uG7SPR:n1zMhWsHQs9StwHLQJdRJ0XWJ","tlshash":"54817db5f830ccc0cc2d6c61d1ad6d8c103613454dc6b879ef96e9b3a2645d3145cbda","first_seen":"2026-04-13T07:55:48.870403Z","last_seen":"2026-06-02T09:16:15.059902Z","times_seen":63,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2oauth-verf33wd.cc/logo-two.png","fqdn":"v2oauth-verf33wd.cc","domain":"v2oauth-verf33wd.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2oauth-verf33wd.cc/","date":"2026-06-01T19:25:53.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2oauth-verf33wd.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 22:36:29 GMT","end":"Sun, 26 Jul 2026 22:36:28 GMT"},"fingerprint":{"sha1":"75:1D:BA:69:91:5F:BA:9B:A1:04:E0:28:B5:0F:F7:D4:F9:83:20:1B","sha256":"36:0F:F5:4F:2E:C8:EF:93:E9:80:99:0A:01:17:6A:7F:40:A4:E8:6E:33:16:70:AC:C4:29:F8:35:D0:DC:2C:3A"}}},"request":{"raw":"GET /logo-two.png HTTP/1.1\r\nHost: v2oauth-verf33wd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 19:25:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 4159\r\nserver: cloudflare\r\nlast-modified: Thu, 14 May 2026 19:44:33 GMT\r\netag: \"103f-651cc534e0a75\"\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AgVpJfzDek9Oie6RAR0x0%2FgCfHJ3mLsERfG0jkLhAXwwRoAymwKdBFdQ1G%2F6fseNI86ZjBlSe%2BkuyicN37lAG8qOXHDedAZFQNTfhSpWKGcmuKLnHmGcUQhvnGoZkRfHK9P9TCwo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0509b571b3156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 71 x 81, 8-bit/color RGBA, non-interlaced","md5":"58fd2a12f571cafad976ed5feddeeacc","sha1":"c7c0342c9edb1d20d96f26c0d713b83c4124b144","sha256":"98e40eaf5f022cb4f4e94991a6fbcc95a11f93545c1354237b2f40cca4d9405b","sha512":"399b57f3f371f14c98a8a1600ba028f721739d76511e2c1476aefb46f212cf58dd9e9142eb0f77e160644a9fec03d32405459658345912457fc19304aad69a70","ssdeep":"96:taIF26hHzU/RmovWsHQOJ9SNnGFHUikhpeuaeJNGYXRfCK0uG7SPR:n1zMhWsHQs9StwHLQJdRJ0XWJ","tlshash":"54817db5f830ccc0cc2d6c61d1ad6d8c103613454dc6b879ef96e9b3a2645d3145cbda","first_seen":"2026-04-13T07:55:48.870403Z","last_seen":"2026-06-02T09:16:15.059902Z","times_seen":63,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2oauth-verf33wd.cc/_next/static/media/70355d4fbd533ab2-s.p.woff2","fqdn":"v2oauth-verf33wd.cc","domain":"v2oauth-verf33wd.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://v2oauth-verf33wd.cc/","date":"2026-06-01T19:25:54.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2oauth-verf33wd.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 22:36:29 GMT","end":"Sun, 26 Jul 2026 22:36:28 GMT"},"fingerprint":{"sha1":"75:1D:BA:69:91:5F:BA:9B:A1:04:E0:28:B5:0F:F7:D4:F9:83:20:1B","sha256":"36:0F:F5:4F:2E:C8:EF:93:E9:80:99:0A:01:17:6A:7F:40:A4:E8:6E:33:16:70:AC:C4:29:F8:35:D0:DC:2C:3A"}}},"request":{"raw":"GET /_next/static/media/70355d4fbd533ab2-s.p.woff2 HTTP/1.1\r\nHost: v2oauth-verf33wd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2oauth-verf33wd.cc/_next/static/css/385d1cca048e3fce.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 19:25:55 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 20144\r\nserver: cloudflare\r\nlast-modified: Thu, 14 May 2026 19:20:06 GMT\r\netag: \"4eb0-651cbfbdd3898\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fN%2B0DhBFFqgV1GSfW74jxbKXEnE%2Fi%2F%2FsxmbjhlqAXNsjkZc2wZdU9jlIht96RtfPcMEYpLHJve9s7nRJKNUXDGQpHX7PR5GRPyy35Gidtnk3SGg0%2BeE%2FeC3Il3dtg5OrEkrs5dHl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0509b62380d56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20144,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20144, version 1.0","md5":"9b9969b222383443533022faa1a8dc15","sha1":"960bfc7f598d95e5e1f183f66f0b9570c59be7f5","sha256":"fd4c8e65080adbaf0cc819eb67b08ed9300e9274dd0069b382d286b93b9544a0","sha512":"dca295932532388d01fc0130671252a3bf707bd9a2e5608d69b2ad0ee9134a9349e2c45734ca8bc223ea4090e918420166c6944395852a108ef7d25a360fd2f0","ssdeep":"384:bDDIoOYd5DFolWnW7Hy2ljK3VB87feqOMtmna2213/p:bwYdFFolz7HyMjK/87vOaPvp","tlshash":"4c92e067de6d3916fcd415f04619ec1ea1b12f617c2206fb0cc8c946906da8d6aaed88","first_seen":"2025-11-23T10:03:25.17893Z","last_seen":"2026-06-05T11:07:43.118136Z","times_seen":130,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2oauth-verf33wd.cc/","fqdn":"v2oauth-verf33wd.cc","domain":"v2oauth-verf33wd.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-01T19:25:52.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2oauth-verf33wd.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 22:36:29 GMT","end":"Sun, 26 Jul 2026 22:36:28 GMT"},"fingerprint":{"sha1":"75:1D:BA:69:91:5F:BA:9B:A1:04:E0:28:B5:0F:F7:D4:F9:83:20:1B","sha256":"36:0F:F5:4F:2E:C8:EF:93:E9:80:99:0A:01:17:6A:7F:40:A4:E8:6E:33:16:70:AC:C4:29:F8:35:D0:DC:2C:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: v2oauth-verf33wd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 19:25:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QL4hNMc73bEWSP9AUi7BfbSO7VrOZH8214FvHQqnvT8woysgLOot8wv3t%2BcZSdO%2BDVSUtZu4BvbbU2mRqBAyHkW7Nx8BAcvvc8zjHKHOygq3QWzcfBrYBUl1XqfzU87rV%2FCqCwdO\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a0509b51da1c56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13334,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"fdf297a066f56546da62379867620868","sha1":"c75c404e3e48dd588e37d8d6ce7d90d999eb638b","sha256":"1a4c65f9d60e111bce6497f4f68f844f0df22e7af42d4424126b20ec573990b0","sha512":"5fe8b63a8024a058472362b47519aa150bbaa3ff420147a7936c450c789fc08118f408c0c4ef3f111dd9cefa2204a88391b58f25be7e0fdecd485fce9520d4df","ssdeep":"192:Ds46mA0hmmlkZ1JirS0y5be+gvdmpV6py3HHxxDAyXtxx8E5jp8mb1AM:VA03kbYm0yE7hQXT0yXPNpdpAM","tlshash":"565222129af1d67b11d342a079b6a6d65fa1e413e3461480f7ac07cc4fc7dcadaa318e","first_seen":"2026-06-01T19:26:19.399598Z","last_seen":"2026-06-01T19:47:34.353574Z","times_seen":8,"resource_available":true,"data":null}},"time_used":490,"timings":{"blocked":59,"dns":31,"connect":1,"send":0,"wait":372,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2oauth-verf33wd.cc/_next/static/css/385d1cca048e3fce.css","fqdn":"v2oauth-verf33wd.cc","domain":"v2oauth-verf33wd.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2oauth-verf33wd.cc/","date":"2026-06-01T19:25:52.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2oauth-verf33wd.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 22:36:29 GMT","end":"Sun, 26 Jul 2026 22:36:28 GMT"},"fingerprint":{"sha1":"75:1D:BA:69:91:5F:BA:9B:A1:04:E0:28:B5:0F:F7:D4:F9:83:20:1B","sha256":"36:0F:F5:4F:2E:C8:EF:93:E9:80:99:0A:01:17:6A:7F:40:A4:E8:6E:33:16:70:AC:C4:29:F8:35:D0:DC:2C:3A"}}},"request":{"raw":"GET /_next/static/css/385d1cca048e3fce.css HTTP/1.1\r\nHost: v2oauth-verf33wd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2oauth-verf33wd.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 19:25:54 GMT\r\ncontent-type: text/css\r\ncontent-length: 1000\r\nserver: cloudflare\r\nlast-modified: Thu, 14 May 2026 19:19:58 GMT\r\netag: \"1f55-651cbfb7153f7-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iWdALgqL1W3hdemAzg054Tp%2BeV%2BnZxRRnEbgMzRRBjDp7NMt34Qdg48lX1Z6uv7KRnGywVy1yMCmlFw2XtVQHw%2FKlmntpaVNLe1gRuMJH1bBIrCfLLr3n90vNDmUxZDl3%2BDb%2Fvni\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0509b55591e56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8021,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8021), with no line terminators","md5":"766e98e416f1393a638750fd1b7a98ac","sha1":"8fe3c394442c24f179049475031f25d94efdd480","sha256":"ec731ee89bc07fb98f5df3ad0c93d8cf8b429be855d4a352b072d0c0d98c2d73","sha512":"e983256b095cf2f5fd0bb5752bf28ba9df0b12ede973253ba0d8659873c8b4ba38ff0fa8789fda4de47c58b971efccbea2e7317cff2db343a0559d1f85c7c48f","ssdeep":"192:kWxyYsWxEYRWxGYGWxsY4kWxoyilBYfE6:Rbp9aPbF4RoyilifE6","tlshash":"4df1bd34502d408ec562fd9235cd7f13383d141585e65e22eead19a98eefc37b3a1b18","first_seen":"2026-06-01T19:26:19.400931Z","last_seen":"2026-06-01T19:47:34.354294Z","times_seen":8,"resource_available":false,"data":null}},"time_used":2035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2035,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2oauth-verf33wd.cc/_next/static/css/ec9b81fd3d10bad7.css","fqdn":"v2oauth-verf33wd.cc","domain":"v2oauth-verf33wd.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2oauth-verf33wd.cc/","date":"2026-06-01T19:25:52.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2oauth-verf33wd.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 22:36:29 GMT","end":"Sun, 26 Jul 2026 22:36:28 GMT"},"fingerprint":{"sha1":"75:1D:BA:69:91:5F:BA:9B:A1:04:E0:28:B5:0F:F7:D4:F9:83:20:1B","sha256":"36:0F:F5:4F:2E:C8:EF:93:E9:80:99:0A:01:17:6A:7F:40:A4:E8:6E:33:16:70:AC:C4:29:F8:35:D0:DC:2C:3A"}}},"request":{"raw":"GET /_next/static/css/ec9b81fd3d10bad7.css HTTP/1.1\r\nHost: v2oauth-verf33wd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2oauth-verf33wd.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 19:25:53 GMT\r\ncontent-type: text/css\r\ncontent-length: 2504\r\nserver: cloudflare\r\nlast-modified: Thu, 14 May 2026 19:19:59 GMT\r\netag: \"2594-651cbfb7d3aca-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2x%2FQa3YdJXAonuYEar1ymEth0DzuhcYPUAZ2hLwNENdfq3DX8r71pKQii6YH3kHpSrLOxDoye7eQjJP0%2F7sEptGkJFgOx9C1m1IBjEyPzruktPpPZqjjKMf4DvbShNTzstkchQry\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0509b55592356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9620,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9620), with no line terminators","md5":"66e959468ff9d97ea9aee1ee380eb124","sha1":"c9fbd92a133e6a28b5e575e6642d7ab9413d7612","sha256":"f02635ecdfe7e833bfaa8b115b3a267591208e8c53e960e52197c28405fd9326","sha512":"0da2b59cdebdec073f23d7e8ca3faf6672861533008e4b9673e8f0d0b57d27e95846a1d7073d17d1da2f3772b9b6c741dea67f491ecf6956dd62a69c4bd556b5","ssdeep":"192:AHU17IwtN8yvHvUlEOhXQZGDMT+QDGULwvyfelinAPjGnwTn:AHPcrf8n7DMT+QDuSSKnin","tlshash":"4712412d69b1e52cf02fdc98f896ad897c645023b10313d9d9b2bc698ee71d6137224f","first_seen":"2026-05-14T10:33:13.29119Z","last_seen":"2026-06-01T19:47:34.355024Z","times_seen":9,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"v2oauth-verf33wd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}