{"report_id":"ae0ab3bf-1f79-4cbc-af68-0a35df71a856","version":6,"status":"done","tags":[],"date":"2026-02-14T11:13:52Z","url":{"schema":"https","addr":"rebelrabbits.xyz/","fqdn":"rebelrabbits.xyz","domain":"rebelrabbits.xyz","tld":"xyz"},"ip":{"addr":"172.67.170.71","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rebelrabbits.xyz/","fqdn":"rebelrabbits.xyz","domain":"rebelrabbits.xyz","tld":"xyz"},"title":"Rebel Rabbits NFT Giveaway","dom":{"size":19103,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e606d7a71d5ed9e427edb8cbb61d962e","sha1":"ffa30bf3b2e81c8938c82fdcb3a8e87cc6c39d2f","sha256":"aaf50f99095c7d7dab0bb8c749454646e620bb80679f9a168bb0c7aeed81d6a1","sha512":"8fa8405ab1ef09794a4b03e16bd1c46307707a74ac652a3e2774e3a8338d9baddd1be9731996b89655770f1824a669eafe1d439a19072f2aa40bbc4eb82c7c06","ssdeep":"384:Cwt4Mk15Z175ooLny6FIx6cbtU8VgX5CqYA5:LA15rwIBJEA5","tlshash":"2b82e73556e2113ab427c6d673d7634e3660f007d20b889877dd42e48fc2ee7aa762c8","dom_hash":"domhash6ba5b63bb600c268c5a2ddc177ae7545","first_seen":"2026-02-14T11:13:11.33974Z","last_seen":"2026-02-14T11:13:52.907984Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rebelrabbits.xyz/","fqdn":"rebelrabbits.xyz","domain":"rebelrabbits.xyz","tld":"xyz"},"ip":{"addr":"172.67.170.71","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T11:13:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rebelrabbits.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rebelrabbits.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-18","domain_rank":0,"first_seen":"2025-11-19T02:21:30.020362Z","last_seen":"2026-02-13T10:46:33.11887Z","alert_count":5,"request_count":5,"received_data":300904,"sent_data":2217,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:3.3.4","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rebelrabbits.xyz/","fqdn":"rebelrabbits.xyz","domain":"rebelrabbits.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0375fecb9aed3bd925ad7c389568cb2","sha1":"ae08c68ccd6a1986015c68b4860e39f1611dfc3c","sha256":"6b44f07db25c8662e2efce325fc5a5b7a2649528b99032a9118dce9aaea2dddf","sha512":"081b7018828278415587b8889fec9b1732949d4494ae5c625933b058e5b3169220d7560ca8862bcae1686cff22431e58673fa35266ff43409bc3d44440675086","ssdeep":"","tlshash":"8281943497fa09bace2b43f3474bd2103b20b047318ac4663b1ccba41fc0d61a9ba9d4","size":3858,"data":"","first_seen":"2025-10-20T19:17:09.877094Z","last_seen":"2026-04-27T03:24:45.689878Z","times_seen":356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rebelrabbits.xyz/","fqdn":"rebelrabbits.xyz","domain":"rebelrabbits.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f39751808e44d3de1e63eac53c30707","sha1":"e4c0dc11652bc42658503db4fe8e4343016b7b85","sha256":"dc1df2ec732141a8e5a1bf11fc6034365b07110ee6c30e61a08acbbc5cfc5737","sha512":"608e301b1d4c14715224ee09673dd4beea31ed0329437e4f800e5c55c58656027fc52761bdedbeb96366befb784c1b62852cfe06ba77a65a56a9374e82362e3b","ssdeep":"","tlshash":"0ee0269ba883145111b320789edf82087a3264523048e740a86cc2b82f3091f81515cc","size":310,"data":"","first_seen":"2025-10-20T19:17:09.879087Z","last_seen":"2026-04-27T03:24:45.690523Z","times_seen":357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rebelrabbits.xyz/logo.png","fqdn":"rebelrabbits.xyz","domain":"rebelrabbits.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebelrabbits.xyz/","date":"2026-02-14T11:13:31.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rebelrabbits.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 01:04:49 GMT","end":"Fri, 17 Apr 2026 02:03:23 GMT"},"fingerprint":{"sha1":"5B:9D:5F:0B:02:A6:B6:4B:78:C1:6A:F6:7B:24:A6:FF:2E:C9:6F:0D","sha256":"EB:29:37:9A:4E:67:F6:20:25:5C:4F:16:A6:9E:64:6D:38:AA:4B:7D:B9:19:37:2F:B4:E5:52:30:23:5B:2A:8E"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: rebelrabbits.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rebelrabbits.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:13:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 57193\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 20 Feb 2026 10:46:04 GMT\r\nlast-modified: Tue, 18 Nov 2025 20:46:06 GMT\r\netag: \"df69-691cdb0e-83d5e0d912c13d2;;;\"\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 88047\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=moW0M9mKG66F7aQEi%2FFXaoHqSEUnsUQaK50M5C5v9ONAYLweHe6eU20PQ3DyjSjIbzahYrjGVrq%2BzSSo6CxVSYneVtpuhxCRQzT7KJPHFQI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc22fc7819a618-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57193,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"bb14e53ac1eab643da0cb70727ef6519","sha1":"af926a9db4f203cf098ac741be588d68b6962eb1","sha256":"8e797b9900240636b8a6b29a7bf55b7e33ef545017f4a766e1b4677402649e8f","sha512":"e21703d67f79e92e545fa3dfc6f10d47c5d0c9d26d15b51448b2ad26680f6d83b501715c49c9d0f5a759703693c84e0200c486e65f5dc72c0610c8bfde630991","ssdeep":"768:kf7paUuXvX77mO0HlaZaSZBXpzBL/R02zcCDM/O/t2bscKNmJcNoD7O5ueHkE:y7p0/mRF+aGBLu2zfDf3i7O3x","tlshash":"c6430267870d4b11fc9e13fa208c9a576709b4ee54168e8e18c5ac3d734cae0f748ab1","first_seen":"2025-11-19T02:21:34.269939Z","last_seen":"2026-02-14T11:13:52.90978Z","times_seen":7,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rebelrabbits.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebelrabbits.xyz/","fqdn":"rebelrabbits.xyz","domain":"rebelrabbits.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T11:13:30.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rebelrabbits.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 01:04:49 GMT","end":"Fri, 17 Apr 2026 02:03:23 GMT"},"fingerprint":{"sha1":"5B:9D:5F:0B:02:A6:B6:4B:78:C1:6A:F6:7B:24:A6:FF:2E:C9:6F:0D","sha256":"EB:29:37:9A:4E:67:F6:20:25:5C:4F:16:A6:9E:64:6D:38:AA:4B:7D:B9:19:37:2F:B4:E5:52:30:23:5B:2A:8E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rebelrabbits.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 11:13:30 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NzWj%2BOFrfbvKY1W75GToU6PCC9B2otLVYEwj8DZ05JIJ%2FpATZNqlBS%2BqXI5IgIO6D6w1sbHNcq9L8rG%2FvZuF%2FImFzcd7P0eGQGFxD0NQq24%3D\"}]}\r\nlast-modified: Tue, 18 Nov 2025 20:46:06 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\ncf-ray: 9cdc22f6c87e75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Vue.js:3.3.4","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":18839,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"9fe59d3e5654cebd63494c082f052596","sha1":"a6f6ed310bd6220667033c32115ab203ed5909a6","sha256":"7b1f662968b2c8967154fee87a886efa9f22dae05a7352dea5d725b6266dbd7d","sha512":"f2b76d2723862ee8d27ebff33588bd39a472bcba609f0f4002da6ca27ed037da6fb3e26b58d4c5ff1bd0a95aa1284a2c52dfbcaf5bdfeb61baac7c151780eda3","ssdeep":"384:W6t4Mk15Z175ooLap6F+r6cbtU8VgX5CqYA9:RA15ryIxJEA9","tlshash":"cc82e73556e2113a7427c5d673d7634e3660f007d20bc99877dd42e48fc2ee7aa662c8","first_seen":"2026-02-13T03:40:19.486276Z","last_seen":"2026-02-14T11:13:52.910707Z","times_seen":6,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":82,"dns":54,"connect":8,"send":0,"wait":265,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rebelrabbits.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebelrabbits.xyz/vue-3.3.4.min.js","fqdn":"rebelrabbits.xyz","domain":"rebelrabbits.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rebelrabbits.xyz/","date":"2026-02-14T11:13:31.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rebelrabbits.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 01:04:49 GMT","end":"Fri, 17 Apr 2026 02:03:23 GMT"},"fingerprint":{"sha1":"5B:9D:5F:0B:02:A6:B6:4B:78:C1:6A:F6:7B:24:A6:FF:2E:C9:6F:0D","sha256":"EB:29:37:9A:4E:67:F6:20:25:5C:4F:16:A6:9E:64:6D:38:AA:4B:7D:B9:19:37:2F:B4:E5:52:30:23:5B:2A:8E"}}},"request":{"raw":"GET /vue-3.3.4.min.js HTTP/1.1\r\nHost: rebelrabbits.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rebelrabbits.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 14 Feb 2026 11:13:31 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 22 Apr 2025 07:41:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zyz6I%2B2ElNKdK2JehxBzqKTVToiX7mcik24cTRSDvlRpB9e5wuBubpQjqomuySEKsqmMbSAHoTJMAuawhKy63SQs2S3RvrFrfOZdx6MOPqw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncontent-security-policy: upgrade-insecure-requests\r\nplatform: hostinger\r\npanel: hpanel\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\ncf-ray: 9cdc22f96b22a618-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4511,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (371)","md5":"b16e9097fc7d3af8ebfcfce7aba0a42d","sha1":"2af3c8408b8445fe81d9a7c8d7cc8e8a05bf80f5","sha256":"e7db95c97a5d45787cc3e40cbcb93b748fefc65bc14e162c746e37f979861729","sha512":"53a7a2c276fbc5159231c162eb863504448515f1a078832b81f1bffeedb1c82932810b66748fd4111d1b8fb866622a5cc63e79e497227b611c90886ba45d3f3b","ssdeep":"96:tr+ulojsBwJG8YqVcqHL/GSrrLc1VhrJuzeK:tyoasBwJG8nVjaSeVhrJgeK","tlshash":"0891f88f25f381452603c99037f9b61499554007f685eca8bdee9228cfc4b8a41e3bdc","first_seen":"2025-04-22T08:45:29.599713Z","last_seen":"2026-08-19T10:18:37.927922Z","times_seen":39443,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rebelrabbits.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebelrabbits.xyz/logo.png","fqdn":"rebelrabbits.xyz","domain":"rebelrabbits.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebelrabbits.xyz/","date":"2026-02-14T11:13:31.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rebelrabbits.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 01:04:49 GMT","end":"Fri, 17 Apr 2026 02:03:23 GMT"},"fingerprint":{"sha1":"5B:9D:5F:0B:02:A6:B6:4B:78:C1:6A:F6:7B:24:A6:FF:2E:C9:6F:0D","sha256":"EB:29:37:9A:4E:67:F6:20:25:5C:4F:16:A6:9E:64:6D:38:AA:4B:7D:B9:19:37:2F:B4:E5:52:30:23:5B:2A:8E"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: rebelrabbits.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rebelrabbits.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:13:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 57193\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 20 Feb 2026 10:46:04 GMT\r\nlast-modified: Tue, 18 Nov 2025 20:46:06 GMT\r\netag: \"df69-691cdb0e-83d5e0d912c13d2;;;\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 88046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7i9ZmPY%2FhyFTLUyTXXwCtBnNbFqwbpOt8WmnYOVQvqTd0qDH8LRcjUBPLu5pCAIFtxmUFxRWaCEFjmd0lTvHi1gMMoijtNhpMKx%2Byo94NA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc22f96b24a618-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57193,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"bb14e53ac1eab643da0cb70727ef6519","sha1":"af926a9db4f203cf098ac741be588d68b6962eb1","sha256":"8e797b9900240636b8a6b29a7bf55b7e33ef545017f4a766e1b4677402649e8f","sha512":"e21703d67f79e92e545fa3dfc6f10d47c5d0c9d26d15b51448b2ad26680f6d83b501715c49c9d0f5a759703693c84e0200c486e65f5dc72c0610c8bfde630991","ssdeep":"768:kf7paUuXvX77mO0HlaZaSZBXpzBL/R02zcCDM/O/t2bscKNmJcNoD7O5ueHkE:y7p0/mRF+aGBLu2zfDf3i7O3x","tlshash":"c6430267870d4b11fc9e13fa208c9a576709b4ee54168e8e18c5ac3d734cae0f748ab1","first_seen":"2025-11-19T02:21:34.269939Z","last_seen":"2026-02-14T11:13:52.90978Z","times_seen":7,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rebelrabbits.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebelrabbits.xyz/image.png","fqdn":"rebelrabbits.xyz","domain":"rebelrabbits.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebelrabbits.xyz/","date":"2026-02-14T11:13:31.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rebelrabbits.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 01:04:49 GMT","end":"Fri, 17 Apr 2026 02:03:23 GMT"},"fingerprint":{"sha1":"5B:9D:5F:0B:02:A6:B6:4B:78:C1:6A:F6:7B:24:A6:FF:2E:C9:6F:0D","sha256":"EB:29:37:9A:4E:67:F6:20:25:5C:4F:16:A6:9E:64:6D:38:AA:4B:7D:B9:19:37:2F:B4:E5:52:30:23:5B:2A:8E"}}},"request":{"raw":"GET /image.png HTTP/1.1\r\nHost: rebelrabbits.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rebelrabbits.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:13:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 159075\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 20 Feb 2026 10:46:04 GMT\r\nlast-modified: Tue, 18 Nov 2025 20:46:06 GMT\r\netag: \"26d63-691cdb0e-ba5a9fb07384f923;;;\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 88046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n5qcoSXRebxWDQ3%2FhY3AegL3p6IVU8zRZWXPpwqklQT79cqiE4ZLNuPI%2FsfUjEMpWwX1qbZ%2BqsIc3tKLWao2EK6JjgHHjxWKCRQU18871go%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc22f96b26a618-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":159075,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x500, components 3","md5":"05f381ee0458127e60ea971c40b40ffa","sha1":"8ee2496eaa7b744e56593daa9786242b27216efa","sha256":"98e49819b0d047899e35f9cd369a32a94a66d0563105ad789bcc6ca08dce2ea3","sha512":"8a83e6bca5e60c86c3f13323cc16ba7f62732a023617fca735601550b9643a1f74f186206e33c045700c725f47227800599f35ffc0b2220e8cedf900ffb9ecc7","ssdeep":"3072:bQ46C8Y7jCQFGX+5pYOvW3HVmGhNO0KJhbKtF7e2RAAovaZamNKj:b2yjPUX+5yOvW3MGhEejAATZzNKj","tlshash":"20f3125b63204b96cd3d6279295e0e34776c8f96c106aede3bb41183f361248b30ee79","first_seen":"2025-11-19T02:21:34.282356Z","last_seen":"2026-02-14T11:13:52.9122Z","times_seen":7,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rebelrabbits.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}