{"report_id":"b04e7e54-59d0-4e28-886a-ec655974de0a","version":0,"status":"done","tags":[],"date":"2026-07-08T11:27:40Z","url":{"schema":"https","addr":"gov-flarenetwork.xyz","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.166","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"title":"Flare: The blockchain for data","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"gov-flarenetwork.xyz","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.166","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T11:27:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"gov-flarenetwork.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"gov-flarenetwork.xyz","ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-07","domain_rank":0,"first_seen":"2026-07-08T11:27:42.208927Z","last_seen":"2026-07-08T11:27:42.208927Z","alert_count":42,"request_count":14,"received_data":5033251,"sent_data":6715,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-07-13T07:28:03.100665Z","times_seen":88476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/assets/flex-layoutdock.js","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"890f92986327c4a617a493085ee9bdc6","sha1":"652e58f7aabe537940a47e3a797249ea64e9bac0","sha256":"40d2226998abcb66869a16d1bfc734538a67a04c17410e9c6ce282e127f8c77f","sha512":"29c2c34bf5190f9c87f05a42ca8c9c569fb552c8c2f66dfd22b8a9b40ff54591ab599e6606dbd8f387f636fb0a7d35ce1edd7900d092c9d150bdc86619194cf7","ssdeep":"6144:MtIN+bq9CMJI+bq9C/ZE15RvkbYRE5V+XXZHlgRZHqvne9tjlN05HysxOI4SSnmT:2GYdlsdqvQjASsxOIGZLm","tlshash":"2735edf713948d2f84ebe9c5cdb54c0c18b587d56e2a658aad339d8bc24c7f50ac8788","size":1118438,"data":"","first_seen":"2026-07-07T07:20:36.260532Z","last_seen":"2026-07-12T20:59:35.26289Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5b767c078c6813816231552aca1d562","sha1":"34f99579b527c24b3a5af82abb42079a0d3e1a51","sha256":"c17d50bae5a02a35e0ae5d0005c694495952f093629bb5193c668070161b0f7a","sha512":"7b4aed1d33c4891894a556505047a8f7afd72efc1c30c064b5a428fac50a5475e895f3937869de6d047128910d762069084c41d12fbacecffd43cd98e84b2e48","ssdeep":"","tlshash":"70c0125d7010696614ce687d4ccf088ebe368812a20809c999dcd4547bb1e6c42e484c","size":185,"data":"","first_seen":"2024-04-08T19:47:46Z","last_seen":"2026-07-13T05:36:21.815208Z","times_seen":694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"28463ffd241a760c6b6a66378d3d242a","sha1":"bdfac461a3e7d5b78df3963cb057a59ada10146e","sha256":"6c6184f223a4cfcd6e8deaaa2d905fdcea094201022cb77b91ae847387f81d22","sha512":"10a3f429bf8407619078329d0aee41343333c1dc82af5eff1c3145c98ebb79de639100f61f85383ec248423a606ed16edfede03f7cd77318e12ac431d29d671d","ssdeep":"","tlshash":"ab41bf2baba7337958ab25b76fcba7943d2204430449c5107facca818f60e7159676e8","size":1962,"data":"","first_seen":"2026-07-08T11:27:46.071402Z","last_seen":"2026-07-08T11:59:26.983535Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-07-12T20:59:35.385677Z","times_seen":1362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/579c7f5cb4a415ce.css","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gov-flarenetwork.xyz/","date":"2026-07-08T11:26:58.707Z","timestamp":1783510018707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gov-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 16:58:18 GMT","end":"Mon, 05 Oct 2026 17:49:45 GMT"},"fingerprint":{"sha1":"5F:42:AA:8F:DF:CD:66:20:D5:02:BA:F3:93:73:B7:9F:1C:87:AD:3F","sha256":"EF:1D:9C:A1:19:C9:A5:7B:C3:01:78:FF:9F:D8:9A:51:7E:A2:62:A7:C6:1D:7B:66:DF:AD:D0:6C:0D:70:88:74"}}},"request":{"raw":"GET /579c7f5cb4a415ce.css HTTP/1.1\r\nHost: gov-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gov-flarenetwork.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:26:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a4bcfc6-7711\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2Fgn%2FAh23gmmponHF5lgcEtTTHn4R0e%2Bod%2FxRZrXXmx80WwY56i2cO9dZbIemNukFBkBjOv6iJMZlvX60Tl%2BvLU%2BPs8QiHzfzs1yTD74n7GML0zT7xox0M5gA%2FJTK9DfbejKRrSrnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17ebcb0ee7d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30481,"size_decoded":4732,"mime_type":"text/css","magic":"ASCII text, with very long lines (10182)","md5":"c986ad8c9796cbae33d49deb8538ba5b","sha1":"357407f751a8b8e02ff98621312e6d58f84c3baf","sha256":"e35b0fea230c68bbdfeaccd85bec05ae7f46dc53114cccce2a7533826c6ce385","sha512":"d078e7a477b22f951c3e29fff59bc5af1e34ac2b137ff8b2501d8104d62e06eb08fa9ca6b177cbf40a8c46766e53c71e31dad4698eac7633d459ee60c912dae3","ssdeep":"384:G9PqbwLV0qxkaEHS+0f1x9gMcHe+MFBohb+GsWNrChqkALVb8xMqlhiqKyj0xntA:2acx6CKN2T","tlshash":"ddd2ad43e2f4173f605e1186f9828948dfc464faa1968fd0290ecce594da7b27af1b47","first_seen":"2026-04-24T15:23:41.461599Z","last_seen":"2026-07-08T11:59:26.980155Z","times_seen":22,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"gov-flarenetwork.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/64cb809db4dcd785.css","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gov-flarenetwork.xyz/","date":"2026-07-08T11:26:58.708Z","timestamp":1783510018708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gov-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 16:58:18 GMT","end":"Mon, 05 Oct 2026 17:49:45 GMT"},"fingerprint":{"sha1":"5F:42:AA:8F:DF:CD:66:20:D5:02:BA:F3:93:73:B7:9F:1C:87:AD:3F","sha256":"EF:1D:9C:A1:19:C9:A5:7B:C3:01:78:FF:9F:D8:9A:51:7E:A2:62:A7:C6:1D:7B:66:DF:AD:D0:6C:0D:70:88:74"}}},"request":{"raw":"GET /64cb809db4dcd785.css HTTP/1.1\r\nHost: gov-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gov-flarenetwork.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:26:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a4bcfc6-424d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DPQJSf2uFeo148MJ%2Fsqb07ndMQ5Ize%2FwbFD6q6ALQLQqAzsPaIrFnQyzdRNhXGAJSR6%2BmivCWunj8Na9Dod8e%2B%2BlllrMMAVCs%2F%2BjEsrgadacc%2BDpy%2FR1B5g8R7wkhuthse8UEC92Ng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17ebcb0ee7e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16973,"size_decoded":4104,"mime_type":"text/css","magic":"ASCII text, with very long lines (4867)","md5":"f12ef104c3b25c730865f7ed5789c322","sha1":"ba19c7054add04f0bf0e992a881527141eec062e","sha256":"0571062658eaf4268d877c454446432d81fb44585bc7efe0ebf01d4c8369601f","sha512":"6218a6e159f9a86b93a4512c4c4081e8f47d83ea4d5f96eae247ee578b0174a04ab1a4eb15fa30d8a84f7088ca2f9e4437a1ee6dc83304e5c5ae265a99ea6232","ssdeep":"384:SY6Rh6yXjZQmtVAYJQK1h/+SG5JZnWwrf7AZnp:OftpJVTDSJZWwrzAZnp","tlshash":"ed7235856360192793170e3297a18bb4eaa458c14bc3dff990c1edd4c2f6db913af296","first_seen":"2026-04-24T15:23:41.465528Z","last_seen":"2026-07-08T11:59:26.977689Z","times_seen":23,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"gov-flarenetwork.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/assets/flex-layoutdock.js","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gov-flarenetwork.xyz/","date":"2026-07-08T11:26:58.716Z","timestamp":1783510018716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gov-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 16:58:18 GMT","end":"Mon, 05 Oct 2026 17:49:45 GMT"},"fingerprint":{"sha1":"5F:42:AA:8F:DF:CD:66:20:D5:02:BA:F3:93:73:B7:9F:1C:87:AD:3F","sha256":"EF:1D:9C:A1:19:C9:A5:7B:C3:01:78:FF:9F:D8:9A:51:7E:A2:62:A7:C6:1D:7B:66:DF:AD:D0:6C:0D:70:88:74"}}},"request":{"raw":"GET /assets/flex-layoutdock.js HTTP/1.1\r\nHost: gov-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gov-flarenetwork.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 06 Jul 2026 15:53:50 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a4bcf8e-11118a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kjJ7RFKaT%2FY8Rf7I8cIsLlKmvDtoTaqtwJtvrgWwP4yGwWfGxuAsBqsyTzvlaDG7ufRmGtNjSUuIaby4ZP1QXK%2BlreV95IuzpmfJuxCMRoT7G4q%2FLVpVRVNMrhNQk1uSQoGkwYPHVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17ebcb0fe822efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1118602,"size_decoded":268696,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42734), with no line terminators","md5":"a8cc7ae9fd462fe85ffc8d420deec501","sha1":"5be0ec9c8ef4790f69d72d44d07be1ee494fa9b3","sha256":"c1d8d3b089b1f88b3101bc9e725509fddb1632b30b5d8ea4d027180d7cd6fdec","sha512":"1eef957e87f462d69b39c24ea3020b964437ac5d0a8a4202e0da5fa69cce9812cea2b3030587e5377f3627796fbee3cbd4d985ea991a6402e7a2818187c97914","ssdeep":"6144:MtIN+bq9CMJI+bq9C/ZE15RvkbYRE5V+XXZHlgRZHqvne9tjlN05HysxOI4SSnmG:2GYdlsdqvQjASsxOIGZD","tlshash":"d725def713948e2f80ebe9c5cdb54c0c14b587956e6e658aad339d8bc34c7f50a88788","first_seen":"2026-07-08T11:27:46.058537Z","last_seen":"2026-07-08T11:27:46.058537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"gov-flarenetwork.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/omega-module-v2.7.min.js","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gov-flarenetwork.xyz/","date":"2026-07-08T11:26:58.870Z","timestamp":1783510018870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gov-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 16:58:18 GMT","end":"Mon, 05 Oct 2026 17:49:45 GMT"},"fingerprint":{"sha1":"5F:42:AA:8F:DF:CD:66:20:D5:02:BA:F3:93:73:B7:9F:1C:87:AD:3F","sha256":"EF:1D:9C:A1:19:C9:A5:7B:C3:01:78:FF:9F:D8:9A:51:7E:A2:62:A7:C6:1D:7B:66:DF:AD:D0:6C:0D:70:88:74"}}},"request":{"raw":"GET /omega-module-v2.7.min.js HTTP/1.1\r\nHost: gov-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gov-flarenetwork.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:26:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JnNcNi2QX%2Be5KE6JPtR2ycqhKxpCTMgI5aoG%2FapVHEaFjXxDeinfpx5zr93TTtaJXSNA7maMYaTL6Sh6KoKNp6mXaq%2BUCjPL0UqXi3kls6KOcp%2BfW%2FfIs%2BBg2OtgAoQ5X7CX0fb27Q%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17ebcb1fe972efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":752,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"eb1be3f5478c6751f0de6e9128fecbf2","sha1":"94b9d1087b2551a6ab432abc63d64cafb5c212ad","sha256":"6e95d3011ecc51a72fec8b2a8e5b06b4e134c2b2cfe513bfce42d9029c6c8dd1","sha512":"78753808ec755c160823978aa8ebcc391c7c2c71a0b27c2271f2aa0be61349fff888e3775a9fbe9bef7f22d01adb60e1480356fa4654999ee40e6439e32f28e4","ssdeep":"","tlshash":"61c02b7d3513bc4cc5a3317422c37090c0da833764ba81128440810331cf3998ac3397","first_seen":"2026-03-26T19:37:59.367855Z","last_seen":"2026-07-12T23:55:08.94583Z","times_seen":1621,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"gov-flarenetwork.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T11:26:58.310Z","timestamp":1783510018310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gov-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 16:58:18 GMT","end":"Mon, 05 Oct 2026 17:49:45 GMT"},"fingerprint":{"sha1":"5F:42:AA:8F:DF:CD:66:20:D5:02:BA:F3:93:73:B7:9F:1C:87:AD:3F","sha256":"EF:1D:9C:A1:19:C9:A5:7B:C3:01:78:FF:9F:D8:9A:51:7E:A2:62:A7:C6:1D:7B:66:DF:AD:D0:6C:0D:70:88:74"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gov-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:26:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0qRDLdwyIP9Tgk7ZHAmho4i7HipvysV6Yqaf2tuhycuV5%2FpNQbwOiywszKATvez74FNv7iH2pJ%2BQ13db0%2FhHJXW4BdGxuvuuCbTG3sgxTrYEj1aGTMZOHQYjCjwizo2l6MnjdJ9rrg%3D%3D\"}]}\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a17ebcaefe482efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":389488,"size_decoded":55172,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (375)","md5":"93c7f6ee513da28e0c79d920c222ead9","sha1":"720159ad621628bf13200d3c79e7b365463de243","sha256":"2e3ed1f79129549e849d44fe959ba5a403c66b6ddc13ffe374b85db7837c46f3","sha512":"2a0214231eb94985c8577f1c1a082cf751326a33ad59a07a67dd4ec383ea24e3ec34b4bb0efb5603de8f5dea04158282ab108f3a67b736f0e3e530afec669324","ssdeep":"1536:iMs1U5jbBJ/7/pSMuJJk6TKLfQvii10C7Wwd7CEKLiviiECwEaImb4gxJn2RGa4O:KU5jbvtpfdjlbLt+p9is","tlshash":"8c84c8b2f2f112e7501f53d8ea765506efd060fbd1468ec8729c4ae49f46c9ca8d224e","first_seen":"2026-07-08T11:27:46.06073Z","last_seen":"2026-07-08T11:59:26.974446Z","times_seen":2,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":69,"connect":13,"send":0,"wait":95,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"gov-flarenetwork.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/b85a5d1553cdf244.css","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gov-flarenetwork.xyz/","date":"2026-07-08T11:26:58.704Z","timestamp":1783510018704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gov-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 16:58:18 GMT","end":"Mon, 05 Oct 2026 17:49:45 GMT"},"fingerprint":{"sha1":"5F:42:AA:8F:DF:CD:66:20:D5:02:BA:F3:93:73:B7:9F:1C:87:AD:3F","sha256":"EF:1D:9C:A1:19:C9:A5:7B:C3:01:78:FF:9F:D8:9A:51:7E:A2:62:A7:C6:1D:7B:66:DF:AD:D0:6C:0D:70:88:74"}}},"request":{"raw":"GET /b85a5d1553cdf244.css HTTP/1.1\r\nHost: gov-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gov-flarenetwork.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:26:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a4bcfc6-13167\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gYUi22kYCEKKbDfX1S8tfQXUkyft9F1bnkrO5TDX%2BXlYo4fpcTSSJQ51kW5%2FFNsbekf%2BZd2FwJpUrzPwpv9cyfum9W6vBaKA7FdLaaSzJclp1x4smZgbuGQmlzMjt1QnqkQrFNVbdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17ebcb0ee7b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78183,"size_decoded":11834,"mime_type":"text/css","magic":"ASCII text, with very long lines (11983)","md5":"cc8b2707b54a4c12f19dff22508e5cf2","sha1":"84a5ee0a968bcf76acfd7661577712ca9c4150c6","sha256":"7564f93308d67dd43346f1b6f91a9c2e58e50b4b15d72536d1e5822b5d9dc98f","sha512":"6c51be67ead0d9a354a80064848bfe79cef95a4f863a815c64c3c3a43f0955a4ff940c65a60bc2be68b17621ba5e53002af1c13331e2ad7b1db8a4ff8c0bb33a","ssdeep":"384:XeUw08ZHQlDjjNQDdUgLpOy5vIdSJaCaJCrm74FW9BDkKcKphgyoUhDcJH+GldYu:QZwlDjjODJ5gcrq4+p/CGMmxG","tlshash":"4e73fd57b5f1132fd02e2052f1c25c48dfc4b0dbf1899fd0650e9dea429aab266f1b86","first_seen":"2026-05-16T18:36:08.651774Z","last_seen":"2026-07-08T11:59:26.976412Z","times_seen":7,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"gov-flarenetwork.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/d5170cc3037aa5ea.css","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gov-flarenetwork.xyz/","date":"2026-07-08T11:26:58.705Z","timestamp":1783510018705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gov-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 16:58:18 GMT","end":"Mon, 05 Oct 2026 17:49:45 GMT"},"fingerprint":{"sha1":"5F:42:AA:8F:DF:CD:66:20:D5:02:BA:F3:93:73:B7:9F:1C:87:AD:3F","sha256":"EF:1D:9C:A1:19:C9:A5:7B:C3:01:78:FF:9F:D8:9A:51:7E:A2:62:A7:C6:1D:7B:66:DF:AD:D0:6C:0D:70:88:74"}}},"request":{"raw":"GET /d5170cc3037aa5ea.css HTTP/1.1\r\nHost: gov-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gov-flarenetwork.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:26:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a4bcfc6-e99\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XV2WKdP%2BZsrB%2BWo2RrhMp0iehJiNk8gkhmM4nhVWyEMb8WIU%2BYewtiDwAjtsxRVWIM0MqJD%2FFCo7PKKHRbZ5SI5PaOYScflNYAZbTNWhw7cUK4CxVLJe%2Bp9xCkTBmwZBlP8NOGIeTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17ebcb0ee7c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3737,"size_decoded":1756,"mime_type":"text/css","magic":"ASCII text, with very long lines (3736)","md5":"476e8950a1e70e093e13ef6cc4d9b5cb","sha1":"1032f7332b6bbd9ab2f40a9b6b6c9f25c95948e0","sha256":"544a2d4c3c7dd9d002fbc661ad37e3bea8e4e2a8726a3157eb6041a3660bd0df","sha512":"38690ab286c3973e363a3ad99f94b05656251fe92ef482cf614ca233f23695b9587bc0c3d76ed0474f920ffdff97db2cedab032fae5e4d1a2f05f12b6b325452","ssdeep":"","tlshash":"ab71bf73ea35e028f2268d573782755e17089876649787b5ee33ed0dc8e37b31212b08","first_seen":"2026-04-24T15:23:41.471553Z","last_seen":"2026-07-08T11:59:26.977024Z","times_seen":23,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"gov-flarenetwork.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/omega-module-v2.7.min.js","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gov-flarenetwork.xyz/","date":"2026-07-08T11:26:58.710Z","timestamp":1783510018710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gov-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 16:58:18 GMT","end":"Mon, 05 Oct 2026 17:49:45 GMT"},"fingerprint":{"sha1":"5F:42:AA:8F:DF:CD:66:20:D5:02:BA:F3:93:73:B7:9F:1C:87:AD:3F","sha256":"EF:1D:9C:A1:19:C9:A5:7B:C3:01:78:FF:9F:D8:9A:51:7E:A2:62:A7:C6:1D:7B:66:DF:AD:D0:6C:0D:70:88:74"}}},"request":{"raw":"GET /omega-module-v2.7.min.js HTTP/1.1\r\nHost: gov-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gov-flarenetwork.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:26:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WR7bsveH%2Bs0GALyWtE%2F2cshNgMaeOx3E5T8I%2FtVluMe1KR%2FrEhTHGVROr6OMPJeG1l70Yu2hrUUxTckwh2dj5b7ezckldz4PqtxD4Htm4nK3RLMxY2PobBcW0z1V3m3EW4ymkE5%2F%2Bw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17ebcb0fe7f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":745,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"eb1be3f5478c6751f0de6e9128fecbf2","sha1":"94b9d1087b2551a6ab432abc63d64cafb5c212ad","sha256":"6e95d3011ecc51a72fec8b2a8e5b06b4e134c2b2cfe513bfce42d9029c6c8dd1","sha512":"78753808ec755c160823978aa8ebcc391c7c2c71a0b27c2271f2aa0be61349fff888e3775a9fbe9bef7f22d01adb60e1480356fa4654999ee40e6439e32f28e4","ssdeep":"","tlshash":"61c02b7d3513bc4cc5a3317422c37090c0da833764ba81128440810331cf3998ac3397","first_seen":"2026-03-26T19:37:59.367855Z","last_seen":"2026-07-12T23:55:08.94583Z","times_seen":1621,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"gov-flarenetwork.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/light-bridge-v1.7.min.js","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gov-flarenetwork.xyz/","date":"2026-07-08T11:26:58.714Z","timestamp":1783510018714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gov-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 16:58:18 GMT","end":"Mon, 05 Oct 2026 17:49:45 GMT"},"fingerprint":{"sha1":"5F:42:AA:8F:DF:CD:66:20:D5:02:BA:F3:93:73:B7:9F:1C:87:AD:3F","sha256":"EF:1D:9C:A1:19:C9:A5:7B:C3:01:78:FF:9F:D8:9A:51:7E:A2:62:A7:C6:1D:7B:66:DF:AD:D0:6C:0D:70:88:74"}}},"request":{"raw":"GET /light-bridge-v1.7.min.js HTTP/1.1\r\nHost: gov-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gov-flarenetwork.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a4bcfc6-300a19\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=voJHPJ%2FM2oXWN%2FBdvipe9zhviPn4%2BktnxJ4Pgx9bm4WlkkfdHYQ%2FntFfTs6pXCo7dmrKx3FBO8T9%2BFrZOiCu8J%2FOKz3%2BKIMIhaOoPdhjywrBm9Uy24bACY7FXTBx1n04r3ojgnIDVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17ebcb0fe812efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3148313,"size_decoded":923197,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"00b1dba76bd32f7e684ef87c5f8ccb33","sha1":"ec512c8cbe91ea883d1ffdaf3ccbcd715f75b9bc","sha256":"ad416908e16741636cb2bdd3f2597a30e39e76b1dbec1502006b24322b3782cf","sha512":"f5c21163c09d86e7ebf24a1e4fb9c886fbc5642f9cb750d940acde817ec4f0aa319b6df872379b3b6981ed953444f7cb3ada104b99f72f675c3b893ad8db4009","ssdeep":"24576:byqX6t0gZbPT3LHzfHHoGXbouoxi99aD7TTTrzDP4KICSO/xsLD94eYNUbeNNVN7:bymgbVkU5l/ri8V8UNFi","tlshash":"0f258413a2d038d251d75fb1b62750daec2d4bafb48c9afa998cf834bce1054e5d8634","first_seen":"2026-06-18T16:06:38.940378Z","last_seen":"2026-07-08T11:59:26.980699Z","times_seen":5,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"gov-flarenetwork.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/close.svg","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gov-flarenetwork.xyz/","date":"2026-07-08T11:26:58.722Z","timestamp":1783510018722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gov-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 16:58:18 GMT","end":"Mon, 05 Oct 2026 17:49:45 GMT"},"fingerprint":{"sha1":"5F:42:AA:8F:DF:CD:66:20:D5:02:BA:F3:93:73:B7:9F:1C:87:AD:3F","sha256":"EF:1D:9C:A1:19:C9:A5:7B:C3:01:78:FF:9F:D8:9A:51:7E:A2:62:A7:C6:1D:7B:66:DF:AD:D0:6C:0D:70:88:74"}}},"request":{"raw":"GET /close.svg HTTP/1.1\r\nHost: gov-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gov-flarenetwork.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:26:58 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a4bcfc6-541\"\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hlIMNSkmXEoR8NpvDje0vysueAu2%2BmerIYQ6XO51u4kqCyWVY7QYakyDVwyqMSGKIIYRx85UiUE%2F%2FdVRNDkCqSzUG3945rn9VS3c1X%2FjaMD03qB2txzYiokfInA%2BxoIhncHr8v0tyw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a17ebcb10e832efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1345,"size_decoded":1370,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"463a29230026f25d47804e96c507f787","sha1":"f50e0eac87bb8f5cff8f7d8ccb5d72aedda7e78d","sha256":"a049e1abe441835a2bcf35258936072189a0a52d0000c4ed2094e59d2afd189b","sha512":"83f065b7b10e906ef8bf40dd907da4f0eb0f4c28ee2d8b44e418b15f1c06884a579957b2bc27418fac5759825d394819ff0ac48d784b9f05564b8edab25d9426","ssdeep":"","tlshash":"2c21e5fc520853f49d587e98a8623077954514bbbf9db8c8928c847788c53dd4ec8d58","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-07-13T08:13:10.960186Z","times_seen":63318,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"gov-flarenetwork.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/poweredbtcky.svg","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gov-flarenetwork.xyz/","date":"2026-07-08T11:26:58.724Z","timestamp":1783510018724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gov-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 16:58:18 GMT","end":"Mon, 05 Oct 2026 17:49:45 GMT"},"fingerprint":{"sha1":"5F:42:AA:8F:DF:CD:66:20:D5:02:BA:F3:93:73:B7:9F:1C:87:AD:3F","sha256":"EF:1D:9C:A1:19:C9:A5:7B:C3:01:78:FF:9F:D8:9A:51:7E:A2:62:A7:C6:1D:7B:66:DF:AD:D0:6C:0D:70:88:74"}}},"request":{"raw":"GET /poweredbtcky.svg HTTP/1.1\r\nHost: gov-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gov-flarenetwork.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:26:58 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a4bcfc6-eb2\"\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cb6QAFFyQC9GCvPpQjqgXK0HU1C%2FbOihpxEdDuVU8oUDEJTNC7E6u8rpsl5hqSY5dHj72uQhXDLqVQeb7xDQzCZ%2FZkc%2Bsf8zhza0fgGyAUnChaz91rUT9eDJhRVtEGFj6JFOWp9JWw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a17ebcb10e842efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3762,"size_decoded":2037,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e4df113ede6d5ce8de2dc1338a3890e","sha1":"3af1721ca29f4ada0cd422206c253cf8ee52781a","sha256":"911f58b8d14bd6f73a83fd774e44bec97e896317c7093dc83e96921e64f1fbd5","sha512":"12c975049692f337fced697963359f535b7d08b4b230447cba37b6e5c8c1fd31e8f26329a315454c83e51ca41787737428e3932979156e205cf0feaadde8fb97","ssdeep":"","tlshash":"967195cb36ec61e0f9006f78db2b20654dae34f666d1d3d59540fd9564a2e9f464ccc0","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-07-13T07:46:27.631766Z","times_seen":31501,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"gov-flarenetwork.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/Flare.svg","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gov-flarenetwork.xyz/","date":"2026-07-08T11:26:58.725Z","timestamp":1783510018725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gov-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 16:58:18 GMT","end":"Mon, 05 Oct 2026 17:49:45 GMT"},"fingerprint":{"sha1":"5F:42:AA:8F:DF:CD:66:20:D5:02:BA:F3:93:73:B7:9F:1C:87:AD:3F","sha256":"EF:1D:9C:A1:19:C9:A5:7B:C3:01:78:FF:9F:D8:9A:51:7E:A2:62:A7:C6:1D:7B:66:DF:AD:D0:6C:0D:70:88:74"}}},"request":{"raw":"GET /Flare.svg HTTP/1.1\r\nHost: gov-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gov-flarenetwork.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:26:58 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a4bcfc6-37c\"\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2BO%2BWHZFqbQaHKO54YyU%2FNVprfrMnf1mQTX5wPRuUQ6Y2hCLfmxBHe%2B1a8NTWCrNphgE8f8tttUAlNwAwJGA5CFtkWWW3unoA7DZrCU9yqd5cxDWYCyrGrgLOEuMulLIhTlftamAew%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a17ebcb10e852efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":892,"size_decoded":1148,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"595f973187a90d91245e6adbd03e6f78","sha1":"84cf19963d52368852d083a4377e2359d57f5db7","sha256":"b32962a5e4467193bb585ce81d604de083405dba639e7a32154dc39958b50cf1","sha512":"1507e4cc3a19a71943ae16bb68b5cd34a8522f1e2712c770b9f3ddd7a52ae6c42788f9450cfad59fa9b741cbccf15592e5f248f56df154614600dc7e0219c57f","ssdeep":"","tlshash":"bb1100e423ad82c4f906d3300aab787321873dfb49534b98e0812d14d60b46edc35f48","first_seen":"2025-08-11T21:39:04.753608Z","last_seen":"2026-07-08T11:59:26.982112Z","times_seen":38,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"gov-flarenetwork.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/6cdcfbcc140e7bef.css","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gov-flarenetwork.xyz/","date":"2026-07-08T11:26:58.701Z","timestamp":1783510018701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gov-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 16:58:18 GMT","end":"Mon, 05 Oct 2026 17:49:45 GMT"},"fingerprint":{"sha1":"5F:42:AA:8F:DF:CD:66:20:D5:02:BA:F3:93:73:B7:9F:1C:87:AD:3F","sha256":"EF:1D:9C:A1:19:C9:A5:7B:C3:01:78:FF:9F:D8:9A:51:7E:A2:62:A7:C6:1D:7B:66:DF:AD:D0:6C:0D:70:88:74"}}},"request":{"raw":"GET /6cdcfbcc140e7bef.css HTTP/1.1\r\nHost: gov-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gov-flarenetwork.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:26:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a4bcfc6-1d65f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yAUdhluN1XANgkto6%2FuDdu0RkWf8Ims0Bhz4SKedJWfke%2FuYSvFtw8cAYyOLUSYTOk0NZZrZ6jdXCfVykS8fFjjhsrKBg8zIbQ7oIS5sTbvxrNPwY8fq7v9OBMl42mIltEzjjnmZ4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17ebcb0ee792efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120415,"size_decoded":16898,"mime_type":"text/css","magic":"ASCII text, with very long lines (11939)","md5":"9e03833ab9c10d491a04b6dae234ef09","sha1":"69fb24e452ef965718a0d642cb5b82cdbb00d1e6","sha256":"9ce5d79c8b23756bbfb0929f53cd795e5328d3b92f13b78f0cb0873c3e6015aa","sha512":"43d0131d1c76623eabfbe78b300fde4a1e9db2c841220dd06fd7cf4dead24941a0d11fd42958c94cd481f2e6e12bbfa8f4dc86e56211c4421919db74cdd0b47a","ssdeep":"384:S1nJibNBbTA8orrhvUHQ1SS7GK40MAEQgzROuxTf3C5d2PgiKPVID8JXF44pivra:aZovqqlGoBB1c58rmsWNf","tlshash":"ecc31f43e9f4133fa05d2106f9d16808efc0a4ebf59b4fe0580edde54489aa66af2747","first_seen":"2026-04-24T15:23:41.464721Z","last_seen":"2026-07-08T11:59:26.97959Z","times_seen":22,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"gov-flarenetwork.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gov-flarenetwork.xyz/29d75789b264c294.css","fqdn":"gov-flarenetwork.xyz","domain":"gov-flarenetwork.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gov-flarenetwork.xyz/","date":"2026-07-08T11:26:58.702Z","timestamp":1783510018702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gov-flarenetwork.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 16:58:18 GMT","end":"Mon, 05 Oct 2026 17:49:45 GMT"},"fingerprint":{"sha1":"5F:42:AA:8F:DF:CD:66:20:D5:02:BA:F3:93:73:B7:9F:1C:87:AD:3F","sha256":"EF:1D:9C:A1:19:C9:A5:7B:C3:01:78:FF:9F:D8:9A:51:7E:A2:62:A7:C6:1D:7B:66:DF:AD:D0:6C:0D:70:88:74"}}},"request":{"raw":"GET /29d75789b264c294.css HTTP/1.1\r\nHost: gov-flarenetwork.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gov-flarenetwork.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:26:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Jul 2026 15:54:46 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a4bcfc6-1b1ae\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e5lD5AUlZg6vVZHcEtI8O2UzrdY2P0nnb1bZNP0ryYM2FMijCzYCypaNtEzD%2F4LgVALwN4WCnOnPOogcyYltuCYdW%2BI%2FUGBHqg89SdQ6DOXq0rX%2Fr4xl3O3qjj2nECRsIPztjPDh%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17ebcb0ee7a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111022,"size_decoded":15751,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (16853)","md5":"7acc17db58b14669a0841b94c1bb4408","sha1":"9b93c309a0db448eb1d55ba04704368af203aa76","sha256":"8f7eee3ea14c27a30f43f5def41e58c0dc661c252fee8537ae4f834a04b18a80","sha512":"47d862d470dd862258de97fd124ba6c0e2807cb1e867058d721767632c52bc6f355b1f032c66d9dd633de89f2307570417cbeb53874893ced5d68ee1566a667b","ssdeep":"768:KWeCQlBkIapPd6GvZbpyFV7vYyafVcVVyN1HQtlmsbmHDmxHC8hjg+8eItV25ZX7:KbliIapPd6GvrtfVcRids","tlshash":"a2b30e13b6f5137fa05d244af6915804efd074ebf2ca9fe0940edce588899a226f174b","first_seen":"2026-04-24T15:23:41.479963Z","last_seen":"2026-07-08T11:59:26.975516Z","times_seen":9,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"gov-flarenetwork.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"gov-flarenetwork.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}