{"report_id":"b3e41357-7d32-4c64-8d31-0214ee7aeea8","version":6,"status":"done","tags":[],"date":"2025-12-22T02:31:13Z","url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"title":"Just a moment...","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-26T02:31:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2025-12-21T22:36:09.724085Z","alert_count":0,"request_count":4,"received_data":202626,"sent_data":1928,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gazegaxirori.mofien.co.za","ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-06","domain_rank":0,"first_seen":"2025-12-22T02:31:19.685232Z","last_seen":"2025-12-22T02:31:20.152378Z","alert_count":21,"request_count":21,"received_data":582059,"sent_data":11528,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8a9726c9d3137dd0de2c740341d7f4f3","sha1":"4045c2fe4c56613cf5a8e87a86e1a81d17318197","sha256":"f94273a6afbf135349e3f94debe91ea31bacab039ef932f5517d9455de22cf31","sha512":"8b32e1fb824ca1f6d4636589da2c3c09c448c35352b14ebd566e0953a0ed6d40bf1c96e31800f05269d97837572402d6ea5d123539d8d6181a692e7f2777a72d","ssdeep":"3:N/BKL1XFmtS:eL1T","tlshash":"805504c054c431745410cc05d1741555d04d5414101d4401735d04d41f3301034145c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.090306Z","last_seen":"2025-12-22T02:31:28.090306Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b1c331f89580afe","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c424984be196ad88d8e7cd275159753a","sha1":"c584504eee41ddf054eccf1e24e6048bbc5b7323","sha256":"d9951f0858de283d59c9a4237a757d3f514473e41c1e9a99b2ac98f87909d8af","sha512":"2b049cb5c8b0dec8e6dc7aed6e95d1319f68cb9e7bcbb6023f900eabd80c488abbd3fed7b0a2f854838912c1439240045a6f1782650ceea5e63d90a2a72b2c01","ssdeep":"1536:inHH3u21ztD37xzTHaNyUAeNXNmIK8YqrSG3jaiKWH72uSYnJkSVXFcfHa9y/2UA:inHH3Lp1KAM5e4jarG27YtsTuUrs","tlshash":"8cc3e88c38cd795513baa4e5106b79ca62af2c4830489c1ee710d8d478e4b9d77b7ebc","size":121303,"data":"","first_seen":"2025-12-22T02:31:28.08198Z","last_seen":"2025-12-22T02:31:28.08198Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","size":50001,"data":"","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"de903ac826d0b86dc3140bfc6a08665d","sha1":"7302ec48b8bd623d62534f3068c0e9adb09de3c1","sha256":"6ff0c83025de84ced0df5aa995e19594ea2a18097e2b13d273fec4b1bb92714c","sha512":"841b62b09559207ade077869d65e4e6d0cc0c43d3381ff682ad9fe371ef6d491da4f4d55fdc14d4bb779c3836a007de21f329416cdafc67ad2a7d87bda883318","ssdeep":"3:N/BKL1XFmlSRn:eL1pRn","tlshash":"655504c0544031700c10cc41d1741415d11d5470101dc401715d0cd4173101014105c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.091439Z","last_seen":"2025-12-22T02:31:28.091439Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5ab3162baada1de11a89d6bf3684c6e8","sha1":"e43e9a64db0a5bda5a2c2d25330e0aec59da5f79","sha256":"e2b1a2b45e24b2183a66c5e50a59524e7abf3cf82a437f88b041ffa0f84a3b5a","sha512":"0b52593fe6297693181c3544727e55fe8f7084697352cc50f036b6ed17f8f03f404ade72f8d9d6b751423f0bfc839fc205506ff4f16a0335583f1440d17ca98a","ssdeep":"3:N/BKL1XFmHn:eL1c","tlshash":"4b5504c0544070700410cc41d7741415d00f5414101d4401735d0cd4177101014105c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.092879Z","last_seen":"2025-12-22T02:31:28.092879Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d48c4d652767359e9c561fe82259194a","sha1":"0d178b6e21ae3dd80758beb1e57f904f9b2382e6","sha256":"e0606356c9f386c8526a0146248a554421ffb1ab55bc1db4c6e2ac6bb67741aa","sha512":"83a5b9fe5974d542f4fdff1a9353a6a7783d9c85c542374ee17bdfb5bc22c0c4a7bdb9d4e6db47e714427d7dfc7cd734868bf1540fd2e78ea2462d9ad819f36d","ssdeep":"3:N/BKL1XFmwW:eL1nW","tlshash":"3d5504c0744030700410cc41d174145dd00d5410103d4411735d04f4173101014145c5","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.093891Z","last_seen":"2025-12-22T02:31:28.093891Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9d1972350c7e6cb49e0000dd57d09d67","sha1":"df07028a6eea24dbc5e058d5cd7853e85504f8a1","sha256":"972068e282b9bea5e15d5a05ad5d60217b76ddee009c70163e2483abac4d9377","sha512":"27bb31835093d5499fc5f9e0b3983951cfe942e27b42bcd631cb864860b4f4febac4182e7b6650ac7ef2eaf2ff6c807c5fedcd4c1e2f9f7e29ac35a72bfce807","ssdeep":"","tlshash":"416109dad5464521d7de228c49bb7eb6b3b52437990431491dc09d0ced1be8aa04f5ce","size":3391,"data":"","first_seen":"2025-12-22T02:31:28.094823Z","last_seen":"2025-12-22T02:31:28.094823Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"18b35247a127ab399e35623b09571d74","sha1":"e42b8628a16ec4409b37baee60e8b737e6d57f2d","sha256":"672b66562dba40f1bac7c6b03a527ab37ce349a3c2d72f5ba642f8ecd296c419","sha512":"f5c4980aaa1449af3cc3c0371c09f4292d628143905a5d3db541586e941f92b777d2a3d652d106f7f709f847c7546f19240e1a1de8195d007dc76965b19f7901","ssdeep":"3:N/BKL1XFmdn:eL1en","tlshash":"c95504c0544170700410cc01d1743455d00d5410111dc401735d04d517310303c105c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.095817Z","last_seen":"2025-12-22T02:31:28.095817Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"86d69b4aa1d97a47fd5261ac00a0318a","sha1":"eeb0eab5e23a669fc52b0bb83b6d17b755eadb43","sha256":"bbb8d33ccc9cef0cf99fcbb64a5f08c8f0538f20e8ac15fac39019135fc5181b","sha512":"6e06de0b8dc22481a8fa5abfa0175439d635403ffdbd7e6cd962384db545937bae10f5577facc27dbf526a72771b12f1e0e4974ec4f89341f147e204428f6f90","ssdeep":"3:N/BKL1XFmsQn:eL1JQn","tlshash":"c85504c0544030744431cc45d1741455d00d551c101d4503735d05d4173101034145c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.096881Z","last_seen":"2025-12-22T02:31:28.096881Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7773d1f38089bbb0a5bc0437b3c657e5","sha1":"6b54af0b3a1813cb38b3b6788b434f9fc838762e","sha256":"398cc6d76fa86ecdf3bdde8a3884dcbe92f836f6733b161e546bd730e4eba346","sha512":"4e51943307f691cdd65d35d2e99c9e6d6f4bef9ef7077f1bfa911ec6a2045041b94d552b4de3c2348d5b34e4a8032a325d873de39a4b3ae3d1c1abafe2114238","ssdeep":"3:N/BKL1XFmfQS:eL1wQS","tlshash":"115504d05c4431700510cd01d1743455d05d5410101d4c01715d05d41f7101034105c5","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.09784Z","last_seen":"2025-12-22T02:31:28.09784Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4fd1e5c19fef9d0daadb9c81826a9677","sha1":"4034ccb59c65c72d4305094ac9befb0f84948b4f","sha256":"a46541fe0d2f21e1700f2b92a7f9fba3a3b2f7ace2f5169fa70b62838b8d4f85","sha512":"d69a5462afda99019ab2a0b09e7f17eecac3786b0f5c47e4d98e1bc44e80383bad3fe561c4acdc9c840d400d7a1f84cc6ecd6b21a6740bed8390bec0105847d5","ssdeep":"3:N/BKL1XFmjn:eL1cn","tlshash":"cc5504d0544070700410cc01d1743455d00d5410301d4401755d05d5173101014107c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.098995Z","last_seen":"2025-12-22T02:31:28.098995Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/?__cf_chl_rt_tk=EA9Hsn0YZmkzkReiAa_Z457v56kRN4PLtcrGR.ACsZY-1766370645-1.0.1.1-6PvrPGJULLrFT1QvGFNpaJ1FT7kauoFIaz0NEWpz_aQ","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-05T14:44:47.000304Z","times_seen":666993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","size":50001,"data":"","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"29ff8ab8cb3fac63fbeb70d083253f91","sha1":"e858860b2284453fcdfa727bab64251187fd440c","sha256":"b5bfc576e6c9ae09879f59cc66353d8bac7b82a6b9334094b9a23913753dd675","sha512":"3da97c1f18bc456d16f156d04a20086210e905031777f2f016c6527248ce3f4865fa84b3d5052a4762b7f3e0c7e31c422a1bf8163edaeaa1772cd3298e0e6a87","ssdeep":"3:N/BKL1XFmX:eL10","tlshash":"c35504c0544130704414cc41d1741415d00d5414101d4401735d04dc17711103c145c5","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.100595Z","last_seen":"2025-12-22T02:31:28.100595Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/?__cf_chl_rt_tk=l1iGwDS2WgPyFT_T3yXhIOL5_Vyp4HEpAOHjagYJkE4-1766370647-1.0.1.1-OcQRZlC8N4H6xidBshSSxBQbNpa7IjN4hXOBtJC5K_I","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-05T14:44:47.000304Z","times_seen":666993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","size":50001,"data":"","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"40e90c404b178503e8443fb8df726caf","sha1":"3eee7f533711ed5d1134b71cd915072eb8a7a0cd","sha256":"a6520f7302cc1024e1e28919e32f50ba3db9f17a870ad878cfbbfba735c6f51e","sha512":"ab1c577f3f659a477c1617febe388553bcec9f3676a81654c02c48d1db8aef1518706f097318f39b62910fbf528cf2d891e31c5567d8cf01ff6b387617a2fad0","ssdeep":"3:N/BKL1XFmOTdn:eL17n","tlshash":"c05504c05c4030704410cc01d1745415f40d5410301d4501735d04d51731050743c5d4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.101964Z","last_seen":"2025-12-22T02:31:28.101964Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c8765c325a4d3698ca10e3c91df1f45a","sha1":"082ffe15a3cd72ad6e56e2e303ea47d04789cda7","sha256":"874a1d8824b1859805b043b1016c8ac8483800d030728f03d2e7797b9416101d","sha512":"149cd86a0b88532ebb46116046aafbd43b60d5a1281426bcb677f9f05d4e05dca6030fcf6c2d465734d0da63711328f2edc0615f70cf97e8c46d8927528ac7f4","ssdeep":"3:N/BKL1XFmcF:eL1HF","tlshash":"ee5504c0544030705c10dc41d5743415d00d5410141d4401715d0cd4577101414105c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.103131Z","last_seen":"2025-12-22T02:31:28.103131Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b1c32f4dbc01a30","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bda40e85565f271c5c81b9072a1e913d","sha1":"1f9e355387c906027173ec110cc1419d4c587ba7","sha256":"f483ebf93325d06b6e7c691b7ccf8a77f66ad111c6d3c97df8379abb1ff3c824","sha512":"a8d556d003534e94079bbf764507ba4b494e32379f34918c7e87a9a2f2686904e3a0308a1ffc7981bcfa4b056631c51708458e27dfec2d041b4389dca8252aff","ssdeep":"3072:idgb4w0pD86vf1Tp6AH5sl0eKKSt6MJZd4detMbO11:58TdDH+l0eKKSt6MJZd4EZ","tlshash":"1cb3094d78de799023baaca1102b3acea1af2c843058981df31099d47ca5b5d7777dbc","size":118120,"data":"","first_seen":"2025-12-22T02:31:28.077081Z","last_seen":"2025-12-22T02:31:28.077081Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f2c746c0c0114657118745017459c8a9","sha1":"dea1c1ff1f76e067633ca10cdbb3fcfe8a136fc9","sha256":"e449c4592df35ee7de6f540807de2ae89c3231e8b0e5afc115b4e9fbdb8a1d6b","sha512":"a81de6ba37c43fb788c20167e4c753132d992ba056a593d4e1eb44f38e69468dbba849f40c1d8641f53f6d1a42e29d4be7eba46b2b60f39dfb9b8df79b413b61","ssdeep":"3:N/BKL1XFmiR:eL1r","tlshash":"1d5504c0744030704410cc01d1741415d40d5413105d440173dd04dc3f310103c1c5c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.1044Z","last_seen":"2025-12-22T02:31:28.1044Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"32e62c02c8b2d6d61c93cf6683024321","sha1":"79ec4d471407b4b386ee60b290e3c9b124d9820d","sha256":"c79dba73c4c4e48b613300e6b6b46df6c48d03756602efbba66f75b11675b92e","sha512":"45209c9e6fceaa1d32fee3c4cb0c5947f8082b86ea752d937e7f5ef6f7359c58afc6ea5a3a371e2d4b204320fbde9fdcfefe7b1af383c55866d2b5359bb8b050","ssdeep":"3:N/BKL1XFmZm:eL1z","tlshash":"e65504c0544030f01410dc41d3741455d40d5410501d4d01715d0cd417310141411dc4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.105484Z","last_seen":"2025-12-22T02:31:28.105484Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"98f2eae24aad28568c978ba66bff06e2","sha1":"9881f7ce00a22facfde8e2110856956096a6c655","sha256":"88a3802fca02f59357d89a564bb2c7f722c02ec74c1796231a29252c7fe13a75","sha512":"82dc72316cb7810d05f9840c367d6d50c6ecacfd20a1053241c298a84160631a690fa67ff5e4a0e2902ed93df3c598fec3c116f9779b2f8298fde36f8b558926","ssdeep":"3:N/BKL1XFmgG:eL1vG","tlshash":"875504c4554031700414cc41d5741415d01d5430105d4401715d0cd4173103034105c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.106569Z","last_seen":"2025-12-22T02:31:28.106569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b9639437b54e019b054f10acaa5a3b0d","sha1":"bea5fad5c6cd5150efb8ea4f832423b09c067d9c","sha256":"fcaf25a1904f985636f1a492b7330e47f397971834bf6187d00a9fa70714bbaf","sha512":"af9f9e7c779ca920fa3c05451ed733cfbbb6337b86cee12aef3df4ee4ad8e91a7a952751939de791a636e3120ca003a8237bdeb3eea490745f259cc40531502f","ssdeep":"3:N/BKL1XFmQcn:eL1qn","tlshash":"845504c0744030700414cc41d1741415f01d5414101d4401735f04d4177103014105c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.107746Z","last_seen":"2025-12-22T02:31:28.107746Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1b47b67d43fcfcc60b30b957fe64c5d4","sha1":"bac4f3431373a424ada30cb23e1127c34074ef77","sha256":"d6fb2d85b7d8698aacfd06d8781558200a7fcb1bdc27a426d544d575ad1f1421","sha512":"12c74d65ff1e910c7728835ce09f00052e348cc59bdaaea72c7d62ed45d81452e55404cc1ab614ddfe256e0863f6626c0b6df4b0d544f57b4dc4ba164e2f9fbc","ssdeep":"3:N/BKL1XFmUWU:eL1fT","tlshash":"b95504c05c4030700410cc41d1743415d40d5414145f4405715d04d417334101c105c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.108836Z","last_seen":"2025-12-22T02:31:28.108836Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5183096ef7bd8306636aa03acffc50a2","sha1":"c9414922b07353a082982da4c51e2b6c92bd2c9b","sha256":"5d29b504350cf71a40da500facfa6460a015ac2755fb3d1103eaacba7b6043bf","sha512":"50c92fb1cdcb4dd3a7a27ff6a9841d5def407a362342b03bf9fda096a6f5b1f9b9edbbebce05cfd54ea4b0151586d2dc9d6bf488d73b499222d319bffd5eebb2","ssdeep":"3:N/BKL1XFm2Un:eL1hUn","tlshash":"af5504c0544030700414ccc1d3741415d00d5c10101d4401735d04f4773101014145c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.109989Z","last_seen":"2025-12-22T02:31:28.109989Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1013ebc91251ac5954b8f593ed98c82b","sha1":"cd7c06ce7fe973533895502728a88ea7794a2b5a","sha256":"3dfffead78554c47dfb9ac0912f212bcb7da4055d216e37c8a03d7fac6511dd0","sha512":"ee539b002b5f018d8448122c1391f4290de6904d468801704095d938561d1f3bec74056beac95badc5f672095eda1444080488ff55e457c180025899cc0a9629","ssdeep":"3:N/BKL1XFmAT:eL1J","tlshash":"255504c0544430700430cc41f1741415d00d5410101dc401715d04d4173101034105c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.111344Z","last_seen":"2025-12-22T02:31:28.111344Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b1c3303fabf2efa","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12011120e461a0eb82abb85f6a030b33","sha1":"c1c46250a15994532e01414feb55260ebd3ee184","sha256":"153c1d5eb2873c3d140f8096c859fc7e35dcc592ac5ed8c069b8a61b68b673e4","sha512":"ce8d808c88aee2f17ce284ba7e6e3766060ece8218313361b90582e7d50267ac5715849a2456eb637607073aa77e6dfd05651b61368ce16dda5ae10cb21553dc","ssdeep":"1536:iA5b0SrqYqiLH6DsuEWG+vUG1x2cSJkaJgtQ97RORZaJIVJPABW7d1YJ:iAwulqA6DBEwx2cQSqcbaJGJIw7dqJ","tlshash":"97b3f88e6ddeb455036760b8106b74d971aa2c84302c5d2df950cde93ce0b54beabef8","size":117932,"data":"","first_seen":"2025-12-22T02:31:28.088545Z","last_seen":"2025-12-22T02:31:28.088545Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3c570430ac956cf74eacf09436a387c2","sha1":"68a3d6666b0b1e21b62a60513dbfec58fa6cebe1","sha256":"569f843be035f971bda3c0ed293992fe6dc2afb60bbf3aee9be00328aa41766f","sha512":"d89628c26708f1cd1eeb8d58f2994c0ab23e0ff10b6487722fd54a9af3dfdf934439e47cfb75c59ccbf36644a4eb7a95ef06dcd645098c4415839ff8df1652a2","ssdeep":"3:N/BKL1XFm2ln:eL1tl","tlshash":"845504d0544030740410dc43d1741415d00d5414105d4401715d05dc17710503c105c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.112816Z","last_seen":"2025-12-22T02:31:28.112816Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"725da809d848d97a01f5c21661c94372","sha1":"0805e51ea275e65389ad68fdf354bc1484e2a090","sha256":"cf9bfd11dbb0387fc3ee33bba20075c88cdfa88d5c26d172bf8330aec2bc4899","sha512":"06432aa201ddeeb633c393834b9c40f2ab3da9ef81f63250ddd0cc50ed6b886e22c29aa1e48cc4de91f20fc5fe76e35adff95656d02a6365ea06093dda24c23e","ssdeep":"3:N/BKL1XFmVVd:eL163","tlshash":"dd5504c0545431700510cc01d5743455d01d5410501d4401f15d04f417310101c505c5","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.113845Z","last_seen":"2025-12-22T02:31:28.113845Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"86fc947350e4f7692ce18548408dbb04","sha1":"135e6c7d23b4d7913d8d4e45cc2dd664b14f29d0","sha256":"5a2dd07beed937aecff8cfb2a1e0414850d98e54bd124f8207d240ab8aac311a","sha512":"1837d63449a98f23e04507da14c9cc79676f6e6e14c09b1bb87aa6c40b49c2e4d5968d6328a130371ab901c7a6133182fc10b2d85bbd7adaa79dfd7f699a481a","ssdeep":"3:N/BKL1XFmJn:eL1en","tlshash":"055504d0544030700410cc01d1743455f04d7531101d4411755d05d417314101410dc4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.114907Z","last_seen":"2025-12-22T02:31:28.114907Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"77a897953065b8d95c7a89a98cb00f0f","sha1":"dee768ce8728573d810d05ba0a725cbe1c9e7cb0","sha256":"27c51ea4b4fab0fc0e14df095edea97c11da493187eaea3cf4ea5926dc22179c","sha512":"c579c922504d4a8ee2ab8f6e8cd55f845b17e7c755625b487182651d7253c5c4179919c81b8015165920c027ead592dc25fb2d1f8effeb7984c695a2f1eafa61","ssdeep":"3:N/BKL1XFmPYn:eL1kYn","tlshash":"135504c0544030700410cc03d1753455d40d5410101d4401715d04d4173541014105c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.115882Z","last_seen":"2025-12-22T02:31:28.115882Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7f56780bd4a8c790269225b81f80fa39","sha1":"4d9ab9bf940213a96cadb3a74904765854275aac","sha256":"7ef2a49b393988c2a24d26896eac329e4f4688fc63dfb67cf83577bfc53a16e6","sha512":"46c7a94fc30aff7819a44420d0a7543ac5717a69ee56708934478777959924700e9e05bd777547f7458bf259c5407088b292b795fcf8209113f7178da0f399c5","ssdeep":"3:N/BKL1XFmvT:eL10T","tlshash":"525504c0554070f04410cc01d1741415d00dd410141d440173dd44d41f3101034145c5","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.116901Z","last_seen":"2025-12-22T02:31:28.116901Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f820945d86be1879e0645fe534ae5095","sha1":"91a6a62fb65e3a41f887c1239534c33ddebc8c6f","sha256":"b440d99eb66c4301f22d9c236b301c64d1a15b9581f25f5af5d30d7be1f8de12","sha512":"82a246270d02f9dfa8df5201704c6f48b30434857b520dc256c60633b98aea06e1c6762e406ceb0ba084d04dd5cc9968d9085b3cfd3767a4cd54717cbd9abad7","ssdeep":"3:N/BKL1XFm4V:eL13","tlshash":"8f5504c0544430700430cd53d5741415d00d5430101d4415717f14d5173101014105c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.118077Z","last_seen":"2025-12-22T02:31:28.118077Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/?__cf_chl_rt_tk=jraKroVUJ.MZ5bjD8S49sTGObA3tFsUws5nUEAZmvIw-1766370652-1.0.1.1-DYNiNlJSn6VH8nQfNGEhNTF6e5MH9jL.Cvlaxq668vg","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-05T14:44:47.000304Z","times_seen":666993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1b96552258ad0c14f262764258d74388","sha1":"3a37671ea93c0fb13479150678f1d5e21f8e6190","sha256":"37469b3b80922b3afa3ccb5cd4e1a46d74ab772039d7c6165ac0f7124f21386a","sha512":"dc62cdcacded1606e3e777cf88857a338e8f88033f863ad0049bcb87b6d41851dbf01109f65a65b16ae91c797ce3fd4612f0fe43afaf942027f0aa1868b98186","ssdeep":"3:N/BKL1XFmZc:eL1Yc","tlshash":"725504c0544030710410cc41f17c1415d00d5450141d4401715d04d417310103410dc4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.119605Z","last_seen":"2025-12-22T02:31:28.119605Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3114870c483888abf150d4426783444b","sha1":"229b2a03c8eaa02dece2c0e849d7d8e089cea0f6","sha256":"030677adafba5b144b4781166150ec2e6379c548c10d3048b82bf34d6e98e4af","sha512":"14e24bca5138c100efaafbbc239b1f219c74559b00b3f9b8fede562fe7895847119b3da5b69ebefaeeb62d10e36be7961f99a30c260efe46d1eef36341f3095b","ssdeep":"3:N/BKL1XFmPn:eL10","tlshash":"995504c0544030700511ccc1d1741415d00f7410101dc401f15f44d417314101410dd5","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.120755Z","last_seen":"2025-12-22T02:31:28.120755Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cb888a7e6ef63fa9c99a72e19b83a7f4","sha1":"3539298f0594bcfca1a0851d4497bf29791ebf31","sha256":"2115a0b8050532eed43a4f21dde92175812c8f468c4d1c0404161239c21a2c74","sha512":"88634337c215d6014c8dd503f1ed5e09e68512704036713ee1a5b647b12ddc147f7b242d002e542b571c5842ae68493d30ef40c78ef6997294191f7f8bd24963","ssdeep":"3:N/BKL1XFmx7:eL1q7","tlshash":"ee5504c05cc030701430dc01d3743475d00d5510101d4403715d1cd4173141015105c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.121894Z","last_seen":"2025-12-22T02:31:28.121894Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6e3df5c93eca7ed111b72a79c3cb368a","sha1":"6d080ed20eb889e41ce5304703c1b93310abd2d4","sha256":"ce5ad9d2f419408d7abaa134f4a42e91c7c5d373639752d80d93626d166854d0","sha512":"65a8e4c2db8e6b716ee0987aefdd7bd4c50b5375e1f2baf38ec5176b0c7cb8c25c42ba35eec71ac3570ed43df337d91619f30f8d3e1c5db5a6bbc6c19de8b8a6","ssdeep":"3:N/BKL1XFmr:eL1o","tlshash":"5e5504d0544030700450cc01d174345dd00d5430101dc401717d04d5173101014105c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.122943Z","last_seen":"2025-12-22T02:31:28.122943Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f6dd0e73d0900960aa77543334d905f9","sha1":"08a4513e1ed8b02847c06e81a5b65278b02cf3f8","sha256":"06652a9b1b8bf6e79712ee1d68de600ea263ac9719613e08fe8c2a057dcbfe61","sha512":"cf1b3e8030d816a673cb823566615025a8385b5657a21848a5bc4ac2eea989441632ab38f7976c83e7a948a0e0fbcdd50f538a474407de5ee3aeb9cdaf6283a0","ssdeep":"3:N/BKL1XFmk:eL1D","tlshash":"915504c0544030700410cc41d1741455d00d5431101d4401715d04d5173101014105d4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.124129Z","last_seen":"2025-12-22T02:31:28.124129Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4bed023edd971339d777b0e9b75d6f7e","sha1":"778832423e41774bb29a9017260a650fb26bd6ea","sha256":"2548524acd3f59a2977efa0d93c7560529adde0fd84cc42a96a80bf2afe539e2","sha512":"ded48a9051e2a9093b099e2e0f7f9bebb14bb40963219f5b1bd39e7fa199ad0d2781c97e4bcdf88f5262284aa77af4f24bf2044ed27fbb01b4dc09eadd3cbdf5","ssdeep":"3:N/BKL1XFmZV:eL1Y","tlshash":"285504c0544030700414cc45d175143df00d5410141f4405715d04d4173141014105c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.125298Z","last_seen":"2025-12-22T02:31:28.125298Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3d3b142033e0979b3a1d294a606a8ee5","sha1":"6ae7cf27e218af4358df01cb727b02a623009018","sha256":"50b89778f718d52a675a18095c0957ffeb38c85b9700190e1b9b55f91ee7a837","sha512":"dab2d70b88db3c4108714e462d38060e4c15a288036a392384aff67715ecd8cc1651019072edfb8885b6f79778317e8d7c9df62db5e226b838810fc892caaf4e","ssdeep":"3:N/BKL1XFmhn:eL1e","tlshash":"295504c0544430700410ccc1d17c1415d00d5410101d5401735d44d41f3101014105c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.126231Z","last_seen":"2025-12-22T02:31:28.126231Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6be13fb036b1d90e769796a9b8350c15","sha1":"849b40e34e5382e16cf827127314a31f6dd507c5","sha256":"f5326e2312d1596fec812c12f3b0870897e35c791882c12f0f3f4dbfc8ffd8b3","sha512":"ccaaa82b70dd779e826e7a7d72bb59939e6717f518a4c6a890a1cc5787436fc88b5a84a33415b2ec6abfb86d2dc2ca1240418c3c93e6f1e8353178cd6b252aa6","ssdeep":"3:N/BKL1XFm8w:eL1nw","tlshash":"9b5504c1544030740410cc41d1745415d04d5c14141d4401715d05dc373101014107c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.128039Z","last_seen":"2025-12-22T02:31:28.128039Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/?__cf_chl_rt_tk=ryW.0ddIQKGwFqQ80GhgV3W5g_hGJ.vFYev83hWcwoE-1766370660-1.0.1.1-aKKP0qo8kmR6OwErPgTp_HPtfR5SEQFUnLIBUHBTHgc","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-05T14:44:47.000304Z","times_seen":666993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","size":50001,"data":"","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"47336cd4b68cf07cc9bcee18ed4ce396","sha1":"0daa712687a9acd768687a3771b30b52958b111b","sha256":"d03a893358867cc8016cd32a90de113282e16a53c426c4c2b599a55048f959dd","sha512":"878f5e60f906a66811e1b7c727d78ee35d05251c5566fcfc4139e627dc57920aeda6c349bf8a9a475cd3a9ea363518ff019a615eee6d2883e0c96a2a106be241","ssdeep":"3:N/BKL1XFmJ:eL16","tlshash":"cc5504c0544031700430cc43d5753455d00d5431145d4401715d04d41f3101414105c5","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.129696Z","last_seen":"2025-12-22T02:31:28.129696Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1493285115f6351e306604ba6165289b","sha1":"1a17c0c84383acc0b4bbba790d77c436eeac4186","sha256":"01d0980ba96dd212e5481aaf4dd8b4d68522ee7abef896dc87035d5dfbca73e0","sha512":"a144b435ce5500ae942e45e045bf7f83406e81b4049197799240e32120b0af11c59055d4f55d17b72304ec63a44df63f55b86ffdb80c26e9480b3f5019ecc022","ssdeep":"3:N/BKL1XFmARn:eL1Bn","tlshash":"305504c0545030704410cc01d1741415d00d5414103d7441735d04d4173101034145c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.13117Z","last_seen":"2025-12-22T02:31:28.13117Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"284b17653d3fe3b57676d3a2f6df9753","sha1":"8c1719ca07ec97b58dd662fe9d4661395ab7d98b","sha256":"0e0f87fba4ef1cf2f36af1ebe2c100a553296a772e826dc2a14e67da502a599c","sha512":"fe5468e9cd3c6a9061be48655f02ab9ad48a3e8c9a652a7d1492a8d17a0298dfa171f2250f20e190b88a7f47f071b2440b76bb47c16c146857ab3621ec2cdf02","ssdeep":"3:N/BKL1XFmIP:eL1H","tlshash":"435504f0544030744410cc01d17c1415f00d5410103d4403735f04dc173101034145c4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.132359Z","last_seen":"2025-12-22T02:31:28.132359Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"adefc9f344fc9079e14f359901cca3b6","sha1":"7e5a3cebde26b82daf687d773c91b3ccbfc00217","sha256":"5892eb39905f538d16276582be98881acf3e0f7fc35a4d59480e9acadcf03abf","sha512":"4ff8adef48970ba64d65481ebe7884b2a5af4e30cfa3182d6b571d045d7b1502f54fcfae180ddb475829a88c9255b63d301049ba7380e15b46c60df5ff63a227","ssdeep":"3:N/BKL1XFm7:eL1I","tlshash":"095504c0544030f00410cc41d17c3415d00d7410101d4501715d04d4173501014105d4","size":1337359,"data":"","first_seen":"2025-12-22T02:31:28.133428Z","last_seen":"2025-12-22T02:31:28.133428Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b1c3353dcd6a0f0","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb6643c8ed1b7bdf14b0251db4d3e075","sha1":"20ab1dc97fd16d93320d20431d4c25170e69a142","sha256":"3c25da6a603f4f589f311191eb7dddd3c02f3c70cd72a43aef02d03a6f0df8bb","sha512":"93c7a182bc481615e52f95b6ef864e224e7d1c752ce85cadfa85b3cb9e6804081cfeeb8623b9dbca54808a3177a78d17e489e615ad1e5d9baaa28f9d090a5a26","ssdeep":"1536:iB25k/+PV3G266BDJkFlu546ana5QhqaTcil+5rT9ywUPipuOG4vqP6Yqf:ickEk6WlumJa5+XMrXgipup4vqef","tlshash":"31b3f88d78deb459436730b4146b74e9716e2c4460285d2de910cde438e0b9abebbef8","size":117072,"data":"","first_seen":"2025-12-22T02:31:28.082833Z","last_seen":"2025-12-22T02:31:28.082833Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:30:47.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://gazegaxirori.mofien.co.za\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 02:30:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Fri, 12 Dec 2025 11:56:37 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=adjAnz0eBBKNLTMWnoMhsMExfsdQO05EBg.SCIV9zVc-1766370647810-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9b1c3304c87e5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50001,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50000)","md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:30:52.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://gazegaxirori.mofien.co.za\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Dec 2025 02:30:52 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Fri, 12 Dec 2025 11:56:37 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=flAM4A80WNoybUVnjSoVP4niOrEJqNF9gSwy2nmtNpQ-1766370652220-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9b1c33205b041a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50001,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50000)","md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/cdn-cgi/challenge-platform/h/g/flow/ov1/632945356:1766365955:mex13F4-fO-ChiOTgKlcjPsmBAVThxmQQbANfa_fgzk/9b1c331f89580afe/aPCyGU1nCHA47BBC5TNiu.DfzXGxVsKWJlM0K1IZs4A-1766370652-1.2.1.1-d0toZCE8zBlC4vUmVuo58RTpOLIOwAp_NgdapWMRiGuN0XrhX2CVotUGRxpg0DLl","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:30:52.434Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/632945356:1766365955:mex13F4-fO-ChiOTgKlcjPsmBAVThxmQQbANfa_fgzk/9b1c331f89580afe/aPCyGU1nCHA47BBC5TNiu.DfzXGxVsKWJlM0K1IZs4A-1766370652-1.2.1.1-d0toZCE8zBlC4vUmVuo58RTpOLIOwAp_NgdapWMRiGuN0XrhX2CVotUGRxpg0DLl HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://gazegaxirori.mofien.co.za/\r\ncf-chl: aPCyGU1nCHA47BBC5TNiu.DfzXGxVsKWJlM0K1IZs4A-1766370652-1.2.1.1-d0toZCE8zBlC4vUmVuo58RTpOLIOwAp_NgdapWMRiGuN0XrhX2CVotUGRxpg0DLl\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2007\r\nOrigin: http://gazegaxirori.mofien.co.za\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2007,"data":"cmvnMsBMGNeXxiRwg+kXJUVDZ-WmZUpz2p7ikKTRIrDlo3jXtKJk0C5p-WG1unzYlTOsnXgcGr7CnVtCdBjahANNqxZb+9bN2Oj3Ee3WQjbB-m1spAXS$L8wc5X1sTnqdSQU5m1BznUr3P9KAjb$Kz--KYqhWsgNWMIOWcmuznCk-nAE-j8cTVCkHeII1NN3U7NLHM8IT4coROjXL1cYZ8$iAj3TjhxE1ivFtX+Md+7Hh7le7wFT5JxOlhGDEfhoXsjwRJ2mWHqgcZyf4wY2Xr$cgg2djkSVZgdM9Z$2Gz4iv4UFvQGGVBV3HFpz9eMFaCVrQmVJU5fEzbaeHZN5XuFr4ma7FmXclSNYhoWgioqIsv8EPO90z5r0IygyGT41rrXUHUU$4hoAipJWcNSNRrhCAK9laNgMsxVXonxGZ1e2f5Y1ahtzXtBHTnE7dUM+VZZ+ucCgvHrpbKxMntqNBECD0ABCKsLF+Jjx7eCZkURU2zAzrmDjV2IaDW5xIGE+7gQpE4MKWlBk7dxiOSmnpSExiObd8DT$dkKe5IcyXA7mYQmk7QnJQ3LFkb-x1RrJzYt9c-JSVS7e$V$BQC3ZiDA+45R+9E9FpD573O5oLTno9-FRlNi5fpQb+WK+nhAA4KWGxMTXqr2oMpKxMhm3g+sSh5opqIfVhTWoAoW2cOfBhjA5-QsejqnpSQJkQnjEdDt-g-qU9klIofpvg-J2g98UfhJ0hnsKhsdNCHXR$9wo4lZzARmWHhJDBpciPFD1ULdK9tdwAsKoHCNwVG7O2u3XRpcyyxHbZS1QlMgRMEh7pujxwW5x7koJBalFtSv7zvQEF9qr73o95bHF1AYv$YbonMvRusssaC4uCEn9ifN-4OCGROBnC24IXahXINPEjSYQG3030+Ypj44bjq5tY9WXNCZd4SXz8GqGf+AfFALQX-RCYzTSRM+Sgp0oBcpCYuoIJlmeCvgr++cv34xKSBLrZK09mZqZyIUnORB1109izqnCLAkn4MlXgF$1t09-LSxevZM5bNhbTeUPj$bEfRQUGj-CxdNGYN+ahdT$Kl5ozzBs7$jyJml4lMUqyuRVHX+nbyuejrWSBf2kfA2NeQMDVahS5pl4UjxGUyqOPhA9SVSUQt5xrk9AoFdGjw4ESU0CvvRZDyUVXndhEbEaKXOV0yAX+sbi3zVbnjDylgzwgVxyHD85RvVsnMe1szv2fwFh3S1aB1FvR4oHQIgdLA3moCF$YIb2cz8X8HSnP$bPBzntuSuF1iqLnYfq7zIaP2yW4aIxKbwGSQtRqTJ8fk4+Ppejklyjj4-OPGx+wqtTEEtWNsqP0hPaua4LhLAMtbxc4v90d1BraR3dgrv-ZkVlFUGpSVOITWdq7ii8NFz4HUxWAZ$EWXwYehbhFgqoJnpN8lcofb8iGP-KMSkOoPdVP$4QiMh71h4yDoU-Qp8mMM2pzS-n8vkTipbpi09Fr+O-Q+ao8Ldd-Usu+1Ekgcgfyg$+Ndabi5Ba5dYnUPBaATv3ZJ0g8QM3beia$XO14l8kP1l57Fa0pQrAxEHYxxOgga2+zfIGH-3oLqocoUix+vLPqYzqrsG-AHKGXnx0filQ9RYLiRFLI1-fPN9eWs0AczXvqoMxoiqT$IgThhzlHdnlJax+0QM0KLBHWY01yDdyiR$slnWAprdWaJtQxMMB1A2AD9JI1ecPNWHD3CRudc-u1Xd7qqQM2fXI4ZhCI-rF0q+LVaqqj8dRVgFZBAGHwc83iT1B0OWmkv-3lOXkk+lG$7GrvwLqPyCO8I5CQffp0wTFOe941PxaEZbDHR3cWku4hGjulPyTC18$yAHEW0uVuY2cLW13GGbCzOPijslfI7fqZqaXjEON-2TADXg$e4BulnzBiGyKzRpwADOWzcZoCxe77bi2qqfyCpADuOIStQmB4BKifDmqy8+4VEFDYc+mhBhyh93MaTTyob+MlVKlSSFXNAR4EzB3MFBQUZfuh4cbu49EDS10M2XhTns"}},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Mon, 22 Dec 2025 02:30:52 GMT\r\nContent-Type: application/json\r\nContent-Length: 14\r\nConnection: keep-alive\r\nCF-RAY: 9b1c3321bd15a0f0-OSL\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-chl-out: d7FfDMUGhfivrEZ/sYZrBSx/s+Hle0QTV5huoBvxJCKOd3r/M/9lfgDhwvG/Qhyg8QZfzpE9tmPLQPNvTKI2bQ==$E8VCbx1cwI4sGo1tUInECQ==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2F2Q%2ByWdawtkuGD4P8hoHDA0DyzSfNLjybEjklQPMjdvY8wjRn0J0GXEssOLTzwgVwNvgUZbueIAZesL2Gv6ZU8IV9q6U4aaFjcaCSzrOD%2BZSEWmTPqfZSlWbfQfoQrEViCgfbLbc8iWyyT2U\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=543\u0026min_rtt=543\u0026rtt_var=271\u0026sent=2\u0026recv=5\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=2878\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c388aee5b895e903e82a624bb011e200","sha1":"35f272c9e20b19d540385f51d8e6a3d0f3ae5131","sha256":"3a77ba941559f70e32300f869db092307592a75e6733693e985ce002239814a9","sha512":"486ad8f4e805a2547f544cdfea1eb9362a0e7721d90c01e9c03f0bd84cccfd69b4999f1096e3d68895e2e48f0a96212c9a38cf93d5afee760e3d9bbce7c05fc9","ssdeep":"","tlshash":"90600000f3f0000c00c0000c300c000c0300c0c300f300003300030c0030f00c000000","first_seen":"2024-10-11T08:37:20.57558Z","last_seen":"2026-03-15T07:01:33.819158Z","times_seen":8854,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-22T02:31:00.458Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Mon, 22 Dec 2025 02:31:00 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=owVtuQAK76v9YQvn3asOm2FlXxP3OiShZEkLR9sVlrsR9GGP6%2F0Kck1nyMPuS6mC7zB4spZGipF79cb%2B2ga9uO3k0H3H2fIEK0PYef3Idg2orxZTweUGjpRJUmhUtVDcK1bgbWrFgPlZNrM0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b1c3353dcd6a0f0-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b1c3353dcd6a0f0\", cfL4;desc=\"?proto=TCP\u0026rtt=548\u0026min_rtt=543\u0026rtt_var=214\u0026sent=3\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=994\u0026recv_bytes=3312\u0026delivery_rate=2479452\u0026cwnd=250\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5393,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5393), with no line terminators","md5":"b19796557e5e7687f8ad52de513db944","sha1":"34674f4a7fbe89b6f8c67cd743672045a82a3dbc","sha256":"56e22be62afa82bc573f5d4d5e85c445c78d6b68f71a8677d5b9e9bf25710230","sha512":"9db8e7e0cfd1a4b100b4fc1cc55580bce315e524abd07d8bef03d8aa68f49ae29d2564a7a72126bcde0dab9452f82c9e5d0b7c93f0c6e56fc9dd6e0abaa9995e","ssdeep":"96:PNybXZtIEb0EFW87IxNZ+ImlMHzdauTzQvOJfIYzueh89/mw:PNadBRll4dlQv0Byyw","tlshash":"0db13ce7d5024027e3fa12a904bbba69a310b125d7046158d8d1de0ccecfe4b945b6cd","first_seen":"2025-12-22T02:31:28.076379Z","last_seen":"2025-12-22T02:31:28.076379Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b1c32f4dbc01a30","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:30:45.344Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b1c32f4dbc01a30 HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://gazegaxirori.mofien.co.za/?__cf_chl_rt_tk=EA9Hsn0YZmkzkReiAa_Z457v56kRN4PLtcrGR.ACsZY-1766370645-1.0.1.1-6PvrPGJULLrFT1QvGFNpaJ1FT7kauoFIaz0NEWpz_aQ\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 22 Dec 2025 02:30:45 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zWMekZHFcO9tux04Btbd0jH5Vk%2FINcPvR245bEcoo6pIjmKw6Olao4GZw3QnbK%2BeVZIThWIpuCSPJe27gylBYeVOJqViqSDQfaAh0xmJwzApZ9H%2B7xhZ3W94NEylhmK6xlbkppMO%2BTfr6mcE\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b1c32f568ef56b4-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=470\u0026min_rtt=470\u0026rtt_var=235\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=539\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118120,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bda40e85565f271c5c81b9072a1e913d","sha1":"1f9e355387c906027173ec110cc1419d4c587ba7","sha256":"f483ebf93325d06b6e7c691b7ccf8a77f66ad111c6d3c97df8379abb1ff3c824","sha512":"a8d556d003534e94079bbf764507ba4b494e32379f34918c7e87a9a2f2686904e3a0308a1ffc7981bcfa4b056631c51708458e27dfec2d041b4389dca8252aff","ssdeep":"3072:idgb4w0pD86vf1Tp6AH5sl0eKKSt6MJZd4detMbO11:58TdDH+l0eKKSt6MJZd4EZ","tlshash":"1cb3094d78de799023baaca1102b3acea1af2c843058981df31099d47ca5b5d7777dbc","first_seen":"2025-12-22T02:31:28.077081Z","last_seen":"2025-12-22T02:31:28.077081Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/favicon.ico","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:30:52.176Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://gazegaxirori.mofien.co.za/?__cf_chl_rt_tk=jraKroVUJ.MZ5bjD8S49sTGObA3tFsUws5nUEAZmvIw-1766370652-1.0.1.1-DYNiNlJSn6VH8nQfNGEhNTF6e5MH9jL.Cvlaxq668vg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Mon, 22 Dec 2025 02:30:52 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aGApD9tSVBsSCGZNmpzhbnmA2xX%2Bo8brxQKnic47U05Lb0FR70fcQkbk8KxcZ1%2F9o5gvIRm1AVbfomhZy3bWcrWPmDnmTWoQ%2BXj%2FmAGe%2F6GzhZX2f67VqMLkPgyD4LyaJzfwqt9aXDyQB8C2\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b1c33201f105687-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b1c33201f105687\", cfL4;desc=\"?proto=TCP\u0026rtt=891\u0026min_rtt=465\u0026rtt_var=283\u0026sent=37\u0026recv=21\u0026lost=0\u0026retrans=0\u0026sent_bytes=48997\u0026recv_bytes=1084\u0026delivery_rate=34082044\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5533,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5533), with no line terminators","md5":"3c661310654d4e4687285ae0db1761b9","sha1":"9abcbc23cb57f811fa94b9ec6cb27a138a78b189","sha256":"215fbafe871072ad1dc745eef7b2af2f458ef33a0399ff0a3055540946f0747a","sha512":"c27eb5847b8815e86c52637b137180a9dac882d01b5a0b235b5074e01a8392d90d8ac740f106385af9062c677b1cb3b59e8a9864b956298ca9998d60b4089650","ssdeep":"96:PNybXZtIEb0EFW87Iyxv6mKv6g5IDRlL/j6abq49aj2PhMOYzueh85v6amw:PNadBB1elqlDjv9aQqzyn+w","tlshash":"43b15cf7ac42201797e64ae3147ab308f121b0b1db09c586e191ec1c96def2b996a1c8","first_seen":"2025-12-22T02:31:28.077914Z","last_seen":"2025-12-22T02:31:28.077914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/favicon.ico","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:31:00.589Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://gazegaxirori.mofien.co.za/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Mon, 22 Dec 2025 02:31:00 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4c9iducfK2s8TgEU4jjA6VMQ2F%2Bwej4kbP416uG%2F8t59e23TPDOCzQG7bh8OxJSGDcsXTzH8QmS3J10bu3iJPtKA5kNyvkQ3f0If%2FJrbcLXdR%2FgEI9wIAjgdDzuY5fpv4xXZrt01BrWNXQYh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b1c3354ad1b712d-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b1c3354ad1b712d\", cfL4;desc=\"?proto=TCP\u0026rtt=501\u0026min_rtt=501\u0026rtt_var=250\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=399\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5405,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5405), with no line terminators","md5":"994492c8bc2b6085d60f726b9083a13a","sha1":"f5ed1c778a36f479765eb8ed8870e296a9d89169","sha256":"945029a2eabc5a91da5a63b4d2c74cce49fb9eef1b00cc024cb6ecba528f016c","sha512":"f554881157bfc53c853258633fdd3aebcb793663f48fae6e8f20ee9f0afb7a33e22a8e787bfdab151a8c29f34c391d1e271ed98ee4835e264eb561934eeee106","ssdeep":"96:PNybXZtIEb0EFW87IxCXsZX/JPNmLb4hXZhmcRkfhYzueh89Ymw:PNadBzXsR/wM3XRkOynfw","tlshash":"a5b15bd7d6226026f3bc1ae3443e7364c32161a4fb0191d9f761d8acc3daf1b95592d4","first_seen":"2025-12-22T02:31:28.078742Z","last_seen":"2025-12-22T02:31:28.078742Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:31:00.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://gazegaxirori.mofien.co.za\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Dec 2025 02:31:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Fri, 12 Dec 2025 11:56:37 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=kyVtxfaxWkHu9eQ5FuzHDoyREgEtFoCXtc.vnq8VE84-1766370660597-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9b1c3354ba271a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50001,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50000)","md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/cdn-cgi/challenge-platform/h/g/flow/ov1/2032965234:1766369506:3BSwb-yW4Ld4MTy2_PyV5PRpjsUdnUoDrE4_i1AR14c/9b1c3353dcd6a0f0/4iBmLCraRGUDG.eWeMt3cq2HSyLfh5qWrrQxFuYclAg-1766370660-1.2.1.1-eoenYGTHWY36SLWCPcdaBGVlQ9Ibd46ZuzQVdhhrwhaMMeKoRAEvRYv_Ooe.ykqE","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:31:00.804Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2032965234:1766369506:3BSwb-yW4Ld4MTy2_PyV5PRpjsUdnUoDrE4_i1AR14c/9b1c3353dcd6a0f0/4iBmLCraRGUDG.eWeMt3cq2HSyLfh5qWrrQxFuYclAg-1766370660-1.2.1.1-eoenYGTHWY36SLWCPcdaBGVlQ9Ibd46ZuzQVdhhrwhaMMeKoRAEvRYv_Ooe.ykqE HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://gazegaxirori.mofien.co.za/\r\ncf-chl: 4iBmLCraRGUDG.eWeMt3cq2HSyLfh5qWrrQxFuYclAg-1766370660-1.2.1.1-eoenYGTHWY36SLWCPcdaBGVlQ9Ibd46ZuzQVdhhrwhaMMeKoRAEvRYv_Ooe.ykqE\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2039\r\nOrigin: http://gazegaxirori.mofien.co.za\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2039,"data":"F7Bn+hBXQpiQ5b3yfnmmZtB7FSlHq$bIFB74EO-7CyZ2-lMSQWmPL2efu8FUK-b9f9ROf3jQLiqWYTWdtD6J6vtfby1IFSlc8Wq1Prg+uqr22UIfOI34IL9AKDLU3TubjHWvd2H1x971DGTsKnemhAkVTbL8ABH$cXx6Y7yeIsJiuVtBepWzHEp4U8Cj+Zm8j3LCCtytBMpd9g0143DwyfW12dWKyTdnz1$c2xz22DUEXu+xwI+keZxum3CweiGrZ4EYMmReZFfI1zjuN4W174J1XFp-wg18f0duRVjg3$$ORkJ+Z7YPtuBRL6rYIBf4ZlA6L6VMTYnRz1ozvi46kdZBKNrxhHInCb$O6Fz5LqO8$3N8pukS5bxLUiijrM7g80Kfo5wzBc2KFOXJI7g$+hTjEqI3qi5hjhpi68ZfNhIkc3wYfsBeyZknZGIyXM-klUekDTJhpNLEdc3B-+6W6DkkPTsf-bEPY7hbtV9n0KmkR3jKs3yv2xwfwXUHKXM0fkwuA+SHyqMUrNkrmu+nsmVYqPMYuCAyIie$bm$quo-qG8qM8F+H4MzSfNwKyhPAHnxfX$kwT92ibqv$kJjqNHn+yOEb8e$7mNu$fVFKOPLARkBf0Zcsw1f6yQpJ5i$OPQPMWuhDZ+RVevZjknMzhglgg+kXEzGVEDcWst099-cmQ6Kg9ApwTYIFEriErEpIQB3Ire-zfsYmMupjn1lnsslY9Rv+X+AtT-3GBZGlPGq5BVOGkkCwdMgdOsWOKVhIwTuBxE6o48rBOtvTpph6BUF39UoI66jeyVj1sFFPjvKOBNkxk3QYEwm-RROSw9s3qGSIpnvjZUs9kN5kuIGMKv+SEogEkGoxSj6I3yCIEHK-PFvXGq61qo$slkV+yxkQmKO9Uw2Pf4fO0lFHNER22yiS0rd0CbsQR0JJMVypy6q2rMRAHJRDL8KuybcW+w63uvT99XXztnS3d-zuieXIY7wiqyrT2WUPXkWMwf$IEvTPsx4JpWcbh-RAFmC7GX$GwANw+pHnjgALOr4VnKu5PX$LwBgG2wWExuEgujQ6oXXSsdOlFkWdJNunU-g9x48648fYdFJftpzwLT-dsNPh9qCK2VUW7MLLROpJPSlxy2N4N+fuf-VtTdbd04IMvj0N+KYy8sSY5FT$YMDLlTC7vf7jFu5p-frKyx+syJ0QiZOAyl31zWFumZ2s1yRdsXd1Vif-8dXsExHK5PeIdp8nB2jS6xm7W6PYdzs5lju-M$lZS$e6-0wOoL2n-0d91gO7KDu9xEL50gmkzzskTGE2mwpi85nTOlFONjr0FF9U4jYDFL47YPfH9KROj4Y6RWLw-9vXmOuiNfT5nIR+42f5iwTnWbLrqF4ZpLAOSG3twcxlKyB-B1Y69XxWZrbH7$R7sBzE7o0S+e4QyT-fmWtsxV-CRt2V6ytyj3S98iE5VAmBGCTR$gT3n3sdRXEDJZ5ZNuEPP2AyU9I6e-YjkDz$NhL6TiNtjuftAb8FfnH14ndUIf8LG+YfYye98ez7fPprCIizsXGjTU+dg7TMbSU0GHBSUtMNMAQ2fsJxiZmoXTTxRR5-EgPVVyxHJz7L58stlIiDUyz+ejPFXXPqgsV0sEGtMfQsAhFt6jA+m4wPF8$eCUbgM7y3ognxreru6myLhVZgJosKWWRnz4cIlqrBXwZxjgi9HYHFnmVzONefUiTfGM9H5gkdTx3pi$1sW7BURnfYgKq3CqiXoYkGdo+TLB1HVej5klf0YywT4cSMYsE-vE7-l4RdMqS8UeCvNYs6EbS5GShiVXYzityLdzyitjvBW$8UvGyCSzO3iH70ErjNEoxmpdg7voGn8hLwE50xAhZ6dl1XVwGKdjA2KKXNfb84gR45UjeqJjHCbdvI9qlNgNYoJgSQrfPId0GULqAnNQN1$Pe0BdQcuLQy+8B6xf8mRCchO-FhksZYUxZU1HvgN2q3bH6LLVQQcBRdVp2QB-++sYw+2A7H671XurbWmS+j47+KdAdOOIouFUQECV3eKiDDcBn5R0g"}},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Mon, 22 Dec 2025 02:31:00 GMT\r\nContent-Type: application/json\r\nContent-Length: 14\r\nConnection: keep-alive\r\nCF-RAY: 9b1c33560ef776ef-OSL\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-chl-out: vlNR04jMXXumCkdhXJFuQeOFg5E8/I7AanR5ZB68uwLrZveguA9LdXt73f+QMZnV0+wnzkkZbFddYDgdVNEC5w==$vaqEA2BrNXGWuDUpN8E0cQ==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zzY40H7VoTX5k42xYrwAI6i8smRTnvW5AVjcPiC%2FDqfGn19v8kf%2BOsbeV3EydxLNeOCI%2FVfWgqgcp2Dqn9kKXKz8zLEW2%2F%2Btm0pL04Jot2ilLAot9Jqh6kB056qB21NEgJpOcYdq2%2FDLT53R\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=452\u0026min_rtt=452\u0026rtt_var=226\u0026sent=2\u0026recv=5\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=2911\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c388aee5b895e903e82a624bb011e200","sha1":"35f272c9e20b19d540385f51d8e6a3d0f3ae5131","sha256":"3a77ba941559f70e32300f869db092307592a75e6733693e985ce002239814a9","sha512":"486ad8f4e805a2547f544cdfea1eb9362a0e7721d90c01e9c03f0bd84cccfd69b4999f1096e3d68895e2e48f0a96212c9a38cf93d5afee760e3d9bbce7c05fc9","ssdeep":"","tlshash":"90600000f3f0000c00c0000c300c000c0300c0c300f300003300030c0030f00c000000","first_seen":"2024-10-11T08:37:20.57558Z","last_seen":"2026-03-15T07:01:33.819158Z","times_seen":8854,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":4,"dns":3,"connect":1,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-22T02:30:45.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mofien.co.za","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 03:11:23 GMT","end":"Fri, 13 Mar 2026 04:09:00 GMT"},"fingerprint":{"sha1":"65:76:A7:9E:C0:C9:23:FC:38:84:96:9B:E6:F3:5D:73:E2:CF:E2:6B","sha256":"7D:72:79:1B:E6:30:5A:3C:F7:86:6C:9A:4F:F4:4D:27:21:D6:BA:E9:F1:DF:09:4C:C5:83:C3:1F:E2:8C:0C:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 22 Dec 2025 02:30:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GzUlKSHttY1iAuCRtcjPiuivB6r36ASNT7FFQ83RO3Jxk%2Bi5IBKsKhHd3Oq1Kef%2FkHJ%2BnpLMWy9RnpuskcBnq%2F%2F4dolTvmwcbm%2BR0lQ%2FSbI9IeY3LlZXz46IQmZdhrrJ%2BbhVLhauCJkSPkwY\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b1c32f44edca0f0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9b1c32f44edca0f0\", cfL4;desc=\"?proto=TCP\u0026rtt=488\u0026min_rtt=441\u0026rtt_var=127\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3203\u0026recv_bytes=1132\u0026delivery_rate=7476764\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=129c29cf39b39913\u0026ts=28\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7249,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (7249), with no line terminators","md5":"45c63157beaa23c796b9257b2e6743a8","sha1":"6b52b652233d4f0c58f5f057a9e4854d7af80c68","sha256":"4348cb75028e57b2777b28991d48696ce1c6e740f81b6b61ac4d44e9dc77decf","sha512":"2136071ce22b79b1449ef62e78802632d9e59555cc1ab0d7dacdf2263f20176237320651385a45070082faaccdbd196ae4387f6b19ebda255f514d6707209f69","ssdeep":"96:PNybXZtIEb0EFW87Ixr3eLPbWrj+jJoEhdNiZIIL6SEboK7GwSFi7MYzueh8Yjhd:PNadBur3eLPmj+jJlwGILbER971yKQw","tlshash":"c2e16cd3f9465015e3bc8ee610733358e2a591359b49b1aaf290a19c4adbf0bce053ca","first_seen":"2025-12-22T02:31:28.079439Z","last_seen":"2025-12-22T02:31:28.079439Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":17,"dns":0,"connect":1,"send":0,"wait":15,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/favicon.ico","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:30:45.374Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://gazegaxirori.mofien.co.za/?__cf_chl_rt_tk=EA9Hsn0YZmkzkReiAa_Z457v56kRN4PLtcrGR.ACsZY-1766370645-1.0.1.1-6PvrPGJULLrFT1QvGFNpaJ1FT7kauoFIaz0NEWpz_aQ\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Mon, 22 Dec 2025 02:30:45 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0wndjAC2A4%2FqTtzirZBlaL84KpAw5dJ26PfcVvC6VFlzULNage55Uap44RCJC%2FuV5m9aFh%2BxEgcVDmPC%2FP9EeA4stO59TNcXdOBZLFaGC92uejYtp4Zobum77w7rnBzdtS4cP4SXYdfF1jR0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b1c32f598fd56b4-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b1c32f598fd56b4\", cfL4;desc=\"?proto=TCP\u0026rtt=828\u0026min_rtt=470\u0026rtt_var=117\u0026sent=37\u0026recv=24\u0026lost=0\u0026retrans=0\u0026sent_bytes=47992\u0026recv_bytes=1036\u0026delivery_rate=43576956\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5512,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5512), with no line terminators","md5":"cad290cc801fdb19abdc781158c4faf4","sha1":"5ca5ed6a78ee933071ca597666e70c184e6205ba","sha256":"a5ffbd926dcda95ef2ee0c9e53c5d917c8bf1dd733cc473f27e121d0cbe6b301","sha512":"9119f4bbb1a808ba257d4743f833548c8388d571ffd4e0574f8dc043c54aa8b4601824b339f2ae5b533e6fd744a7c606e6db2392d448bb17a6935f80a89234cd","ssdeep":"96:PNybXZtIEb0EFW87IyRqbq/boF8fxVccbM397dyj4gewtJqgYzueh8kbCmw:PNadBCqToF2xVcm4xsj4IJqByAlw","tlshash":"c5b17ce267021023ebb10bfb00277214e195e370d70590b4f6e9e91c86ebc5bd5cc28c","first_seen":"2025-12-22T02:31:28.080375Z","last_seen":"2025-12-22T02:31:28.080375Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:30:45.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://gazegaxirori.mofien.co.za\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 02:30:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Fri, 12 Dec 2025 11:56:37 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=xCkINGrquma3_GE3sxC3Ypju7wgTAUMHNfFXiHO4qI4-1766370645443-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9b1c32f5fc565699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50001,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50000)","md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":14,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-22T02:30:47.680Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Mon, 22 Dec 2025 02:30:47 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RUmXcYIlsMC%2B8Cy%2F3dHPThgjNhMivi904SDADwD5MMUuTAb3x466mVYrNeTUoOnocLKHXmXekV%2FquLmy4R%2Bh8M2med3xO3n%2BksbdBVylbu%2Bq1l0H6rjRs3Kls0jXFRTwZn34IrzA%2F4IaAVL3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b1c3303fabf2efa-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b1c3303fabf2efa\", cfL4;desc=\"?proto=TCP\u0026rtt=458\u0026min_rtt=446\u0026rtt_var=193\u0026sent=3\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=994\u0026recv_bytes=3288\u0026delivery_rate=2637522\u0026cwnd=250\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5393,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5393), with no line terminators","md5":"757f0cdea4ea8ae25a1daf6234d7028b","sha1":"fec897821cb00195061d20071cd54cd5e83ff6da","sha256":"d45bc4c1ccb4d27c2f80309cddec397452320df83f450fa5695bf15a8a500fc1","sha512":"b4597c6b314b8aad08e1d06e270dd7015afd4cb8010ce14e2e724d0ca5be866d19069589441015d0ef1a83e5bac7b4641b0b4513508ab1374a3369fce963e0dc","ssdeep":"96:PNybXZtIEb0EFW87IiSyPfhaB6yyKcW0vk3WpZ/bDu/0Yzueh8Wmw:PNadBvSmUB6rW0KWpZ/G/dy3w","tlshash":"90b15be3d011502ad3fe2bf394bb7344e219b16596058561fa50d93cc2dbf1bcb3a288","first_seen":"2025-12-22T02:31:28.08108Z","last_seen":"2025-12-22T02:31:28.08108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/cdn-cgi/challenge-platform/h/g/flow/ov1/2032965234:1766369506:3BSwb-yW4Ld4MTy2_PyV5PRpjsUdnUoDrE4_i1AR14c/9b1c3303fabf2efa/XFwGNweNqvfkL5K2S6Z6Duhz1_nUt68gqillh9m7biQ-1766370647-1.2.1.1-Uspg5pAywH6nu5MfB8vMTHCGuk_4NC7HC7v6ITFeI9F6IZjQmo0OHVdIc6nBJwj2","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:30:48.007Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2032965234:1766369506:3BSwb-yW4Ld4MTy2_PyV5PRpjsUdnUoDrE4_i1AR14c/9b1c3303fabf2efa/XFwGNweNqvfkL5K2S6Z6Duhz1_nUt68gqillh9m7biQ-1766370647-1.2.1.1-Uspg5pAywH6nu5MfB8vMTHCGuk_4NC7HC7v6ITFeI9F6IZjQmo0OHVdIc6nBJwj2 HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://gazegaxirori.mofien.co.za/\r\ncf-chl: XFwGNweNqvfkL5K2S6Z6Duhz1_nUt68gqillh9m7biQ-1766370647-1.2.1.1-Uspg5pAywH6nu5MfB8vMTHCGuk_4NC7HC7v6ITFeI9F6IZjQmo0OHVdIc6nBJwj2\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1996\r\nOrigin: http://gazegaxirori.mofien.co.za\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1996,"data":"dFMHmvNI4W78bmY-Mr8epxT1DqdcqG5PU9JGNgo3ppHGi9YVvmsWufHN6Mz-xYjyM3Dn43ZdQejZU+xy25luErzzFmVMXKIngMIeuQXVYWoI7hIdj5tubNysbP4kTZGDRoOwxLYZ-tQvM6vWy0rqX6trMo9krDBdh4S$xxYGFYT-eAYpU4pckmtcc08Q9Qdr-hzrmgzM7D3S2K-$2bbJOLTeZPem1b9k3TstJYJKjZzvz9eCB$lYTwwQLoFF0Z-SLpw4fjM3Ng+OIGezmfBF10FWK-r4Rx5remQ0cx8CILnH6xHNnGscw8Qtbn8WNFSj1hEUx+trcNECPj8jKE8sPKeHIsBY7NsI4+f8FipfPbIupiOrPX-3dpegQcbo67T9CnqF0ZWBHIW2y+Jxq88H8teho2wcCBumAroylLohBkLH5$SFSkl1SBblwcrJBqpSr7L9+L4pgRjg5D-K17iEqRRkwf3tZCPkKeWdyv9ATeTtD1cwwgj6x$Ibo417i6ecGZMDNLymovn6488nZ571vgmbbUuDfX4SBAlqcCG$rXokLrZ3OKC2CjbAMZ+wonOOBCNzBSeN0iFZ31BMMRcNuF7tE1klU9nycXyQcl64jNr9gNfGPRxfV8EiO$3GPLtM5-s3L$+3oJixAYkITQ66UYOYsBRDRrw1RW0nS5-UB8+D1EIUWqvYyxq7qHtfNx25hhLc+0XkCY5eFvZUTSwAehNGfuB7qckyw0u3qnJfhzmY2eo+gft0gzoIFCWfkjJn7i9PFAR3ASqXXW0Dh979Xb7vuTB+fgUmiKM44e6uU2MCsdFVTkyKf-kGvk5j3dcLhV8wJI$8vv2GOOCuLUkuIIdApm1WMBf2I+Qr8glBHQ9GvuqTtfDkfII+qj$UY3JUpFekD45kcIOsZx29P4K5OWk3buH8IUxerJAh11FdG6RSj7O8Zb02WLEvrKtcHWP6L8W6+u7TFSgBSAGnAB8CdNN5VDYJWT7mYXunz6VJD8MsjHvZ7jp9MiDx6xVLOneO-HSlx1Tv6eTKX8wq1hBkM+kT+iTMQOGY8uMW762P-igtQ2tQB3k3BTtkbXyTFk7zNzK0HH0w3cVVYEFMDYjuMEDFUi$qgL6nwTgmV13rwE7VNZ0lPM0WxAAtkeAyvuqvNfL5LtRw-2567uBZxU9oA52uzViZbrfHrBli9lWYLs4p$xHBuP+uzICn89EQYwnTGul3FgzwjHJCnjt-zuNRWfZen$nP3Kq4O3ngnH0BmZIrZHldY5kKkCj$tPChS3-Xbnv6KgYrc1kpzkJk49Mc$2gjBCrIdczrnk-L5cIRp3Rf5n8AcEHYDgQx0M+lklE4PrPA$gWzJrTN4ESvV+uGJfrI6TI2MhovtQsJe1eM63MuYTQZmS0lLz3tWnrRxCjJbobNHq2zC1sB1sGvgGynk12zWIjUIQ-3fSIQ$CP$CrhKWjBsz061BqO1YUwRj+QchR-yoCSXE4Xwj5YY4Uvw3-8w$odDS5BWeb75q9ybx0hQtPX48UVQKu2nfKlbRrI3QrX3tqDOgdzQIADdg$euKGl6W1QkoRKgGSzrLtj1uLsGK-+N58m$ksqPDKss6Tj7n3zX+fzNiIn5BdhZhIUv8FFCG6bIuNWUf9$5EusiVd$fMVYpI3p3zSDFk3ZKjtCw-uL5D7imftgC1E5Q0mBui1OswL1-bdIgDBbdStuB2PBzbLq9y5FM5L47hT+20$rteEBY-MeoTPOmu-2NYlm8tJLygUu8X7Xs0Ri82dFhHIexUKmTJBTSwsz7zSCU4ie1p6S2S$2mZBs7nV-R--MwOz9K0O+vj$gXWRPYh13fz$98NSd+EtvoCST8by1N6Z$b1rKFrkT9InfIrlKXQJW0IUYrBXGQPgq8zhts3kUwo2WADqzXGwgec+nkZO2ofBXlG7wWP0hrd9tmtEdwSQJs$rnThRZ8jXe+1ln5Ex1LP7OdifoNnAq5AjCygvfgPeL7FMKRdz+gYfgC"}},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Mon, 22 Dec 2025 02:30:48 GMT\r\nContent-Type: application/json\r\nContent-Length: 14\r\nConnection: keep-alive\r\nCF-RAY: 9b1c33065df10afe-OSL\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-chl-out: Cr06S2m33E9nMy6rqNhW3fVESLfknaNB3RDAtGu9pd/RK+qaqBh/JiBKsuut7w6dSRebansJmhqlQeO3oHhUuQ==$KDVOm4sH33YwwSDsYReSIw==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4gJx99%2FuR5ffRQze640%2F3A7e2LZHkzupdNldZj%2Bj8IcR9rh7IUOCS18iaKCsUbOrbVQfgaBWvkG4gJ2bufsx59Uq4WpDjz8qQNEVWq8cxbDKbqnxD0E4OuIN3HgE%2FC7e71lwhelHzYfWSiRK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=475\u0026min_rtt=475\u0026rtt_var=237\u0026sent=2\u0026recv=5\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=2868\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c388aee5b895e903e82a624bb011e200","sha1":"35f272c9e20b19d540385f51d8e6a3d0f3ae5131","sha256":"3a77ba941559f70e32300f869db092307592a75e6733693e985ce002239814a9","sha512":"486ad8f4e805a2547f544cdfea1eb9362a0e7721d90c01e9c03f0bd84cccfd69b4999f1096e3d68895e2e48f0a96212c9a38cf93d5afee760e3d9bbce7c05fc9","ssdeep":"","tlshash":"90600000f3f0000c00c0000c300c000c0300c0c300f300003300030c0030f00c000000","first_seen":"2024-10-11T08:37:20.57558Z","last_seen":"2026-03-15T07:01:33.819158Z","times_seen":8854,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":48,"dns":47,"connect":1,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b1c331f89580afe","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:30:52.141Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b1c331f89580afe HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://gazegaxirori.mofien.co.za/?__cf_chl_rt_tk=jraKroVUJ.MZ5bjD8S49sTGObA3tFsUws5nUEAZmvIw-1766370652-1.0.1.1-DYNiNlJSn6VH8nQfNGEhNTF6e5MH9jL.Cvlaxq668vg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 22 Dec 2025 02:30:52 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7u4M1pa88ifsBfH9shsWvJTb%2BSVHyiNq%2F9EONNZyy55zKRpPcqYYtahKJ911R7vtn0kjwMH3K3qTJMXKfOoWNkagcJl5K8njNX10G8OrWDLgBwrgwoLdYhCtzBdL58uVt8Jhit5lvPxWU%2FfA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b1c331feef65687-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=465\u0026min_rtt=465\u0026rtt_var=232\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=563\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121303,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c424984be196ad88d8e7cd275159753a","sha1":"c584504eee41ddf054eccf1e24e6048bbc5b7323","sha256":"d9951f0858de283d59c9a4237a757d3f514473e41c1e9a99b2ac98f87909d8af","sha512":"2b049cb5c8b0dec8e6dc7aed6e95d1319f68cb9e7bcbb6023f900eabd80c488abbd3fed7b0a2f854838912c1439240045a6f1782650ceea5e63d90a2a72b2c01","ssdeep":"1536:inHH3u21ztD37xzTHaNyUAeNXNmIK8YqrSG3jaiKWH72uSYnJkSVXFcfHa9y/2UA:inHH3Lp1KAM5e4jarG27YtsTuUrs","tlshash":"8cc3e88c38cd795513baa4e5106b79ca62af2c4830489c1ee710d8d478e4b9d77b7ebc","first_seen":"2025-12-22T02:31:28.08198Z","last_seen":"2025-12-22T02:31:28.08198Z","times_seen":1,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":22,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b1c3353dcd6a0f0","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:31:00.508Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b1c3353dcd6a0f0 HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://gazegaxirori.mofien.co.za/?__cf_chl_rt_tk=ryW.0ddIQKGwFqQ80GhgV3W5g_hGJ.vFYev83hWcwoE-1766370660-1.0.1.1-aKKP0qo8kmR6OwErPgTp_HPtfR5SEQFUnLIBUHBTHgc\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 22 Dec 2025 02:31:00 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3IAb%2Fq%2BG1Tg9MKcYMSJTxepQ%2F1AWr7KY6c2kVT3E0ZZVwcYF2rDy9ttlp2eh2LIx2Oi5r1eLHI%2Bw%2BRIeS19tcxP%2BtwwqC%2BSb1SdcBdXsi9Hh%2B7N8rGWqgMf2r3DiLQc%2BfsNLiDy3ME%2F4npx3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b1c33542fadb518-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=467\u0026min_rtt=467\u0026rtt_var=233\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=563\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117072,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bb6643c8ed1b7bdf14b0251db4d3e075","sha1":"20ab1dc97fd16d93320d20431d4c25170e69a142","sha256":"3c25da6a603f4f589f311191eb7dddd3c02f3c70cd72a43aef02d03a6f0df8bb","sha512":"93c7a182bc481615e52f95b6ef864e224e7d1c752ce85cadfa85b3cb9e6804081cfeeb8623b9dbca54808a3177a78d17e489e615ad1e5d9baaa28f9d090a5a26","ssdeep":"1536:iB25k/+PV3G266BDJkFlu546ana5QhqaTcil+5rT9ywUPipuOG4vqP6Yqf:ickEk6WlumJa5+XMrXgipup4vqef","tlshash":"31b3f88d78deb459436730b4146b74e9716e2c4460285d2de910cde438e0b9abebbef8","first_seen":"2025-12-22T02:31:28.082833Z","last_seen":"2025-12-22T02:31:28.082833Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/favicon.ico","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:31:00.543Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://gazegaxirori.mofien.co.za/?__cf_chl_rt_tk=ryW.0ddIQKGwFqQ80GhgV3W5g_hGJ.vFYev83hWcwoE-1766370660-1.0.1.1-aKKP0qo8kmR6OwErPgTp_HPtfR5SEQFUnLIBUHBTHgc\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Mon, 22 Dec 2025 02:31:00 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=X%2BsFym9pjlqVFaGNKxawIAWR%2FT0V%2Fr%2B5Kvsr5fsTfY5sbzmFtG34RxACjyiyL%2Bf5h0eNf6un4DXP1cbrTNxmQPp8M5dELtpxuTTAmLU9Dpx9noua1bbSQqZkYWX2noUlHFNHJo6t%2BzAteqA%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b1c33546fb9b518-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b1c33546fb9b518\", cfL4;desc=\"?proto=TCP\u0026rtt=727\u0026min_rtt=467\u0026rtt_var=174\u0026sent=36\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=47668\u0026recv_bytes=1084\u0026delivery_rate=46097378\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5533,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5533), with no line terminators","md5":"8f02ce6bce9a393dc3598a5c74d72519","sha1":"4f1b00fc9a22cdad0a7b50b0cbb0ffb6e95ceffb","sha256":"03580ee5813aa98d9b56ccd3a7a7d41757a557cf6067f821a242c60a157b92dc","sha512":"58e6aea43e80b60727eeaafebc37fc798db7fcece729b42744eb089fae2f2f25a8a2949d8132321b7468fdf5f1fb7379add881bef0c209c11c2759288cae4301","ssdeep":"96:PNybXZtIEb0EFW87IxgkVPE6vLsmKzE8TlnyLjLIOif8Yzueh8GNmw:PNadBEm6jKJhyFi9yVw","tlshash":"f6b14bd3d54b902ab3fb26e7417bb3689212f0519f0d5858e881ed8cc1def1748a519c","first_seen":"2025-12-22T02:31:28.083656Z","last_seen":"2025-12-22T02:31:28.083656Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/cdn-cgi/challenge-platform/h/g/flow/ov1/632945356:1766365955:mex13F4-fO-ChiOTgKlcjPsmBAVThxmQQbANfa_fgzk/9b1c32f4dbc01a30/DSQ2Z3FhlROu93yxPgslFV0Xy6cQbr22gq1Js7xQnXk-1766370645-1.2.1.1-al8mkTKC_CeDdi4t3NKB9kMdjtUOsoKR776Ym.OLZFU_.hiC1RHZ1i61voIj6_gY","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:30:45.639Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/632945356:1766365955:mex13F4-fO-ChiOTgKlcjPsmBAVThxmQQbANfa_fgzk/9b1c32f4dbc01a30/DSQ2Z3FhlROu93yxPgslFV0Xy6cQbr22gq1Js7xQnXk-1766370645-1.2.1.1-al8mkTKC_CeDdi4t3NKB9kMdjtUOsoKR776Ym.OLZFU_.hiC1RHZ1i61voIj6_gY HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://gazegaxirori.mofien.co.za/\r\ncf-chl: DSQ2Z3FhlROu93yxPgslFV0Xy6cQbr22gq1Js7xQnXk-1766370645-1.2.1.1-al8mkTKC_CeDdi4t3NKB9kMdjtUOsoKR776Ym.OLZFU_.hiC1RHZ1i61voIj6_gY\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2007\r\nOrigin: http://gazegaxirori.mofien.co.za\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2007,"data":"AgldyKpIT7l3dzruhmbKM3r+tqurlMiLbd8feqDDHFK50P2f339QJw4JHnc4a0znr0Fn-rrNl$PZERt$JTxd2D45PLIQ-giFSNZ809cxkW+CDW4ZaL+ELCg$AACGc$g4ObzRZyNiRxyJrRMVl3oAu81u4asm-uIdURVdnEMt1aBtEbZZDbBzzo+AROkDzc9g32CN00geV7G-8sbmF0IkIVQ$ojqjGZlS-g3MmsYdLIjzRRxffWeWlo+iTxJuP8E5eoX9C8ebXFt5VkQOCWuQRFHvWzvp0mIxmnw1chuWKenuqQ+mF+P480ixA-Fcx2UU8FbfxmeXmKSTrWGjZri-waLELKsAFrKSS2fS-V-WhDbR+gOECzhEmuH0VSsRzP1x97yH2Zu9sV3zzD2Yu$LCuzxtS$Or1ronv$SVzn$vku7kpBjKIKoBGZ9OzrQSGUdVf51syc+EhCTW9qXcS7gDOaXGN0+CTUfBPGsGHcjbPIdkVJDq1NHAb0CG99evGfPASOGy2xSQHxcvzJGrB7$3n-3CpD1yeu$qwjshlri$0pqi7uUF$+0vYIRfFpGcnYYkSh5jhWGN3YM4t2iX7qxjJ0WXIY-n+WkIPftjy58SMVm1xGUVxugZ-wNhVIdBZnJto9il$OE-IpP0W7fwMfJqF5ahZfcHC2wm3SVaEv$dd5covJjW$Pjf1P8dVDN7KzUxhxwjMkKvgtzKYjetX8Zcjv41Oe3p9SljlMuur0n4HoEmCdD3hPmgnDTzl0IKGq3lc5xen2IHstGGzmcn4Z8TDpQfXHcaBdNkurTUAebno+PDNo1RP$2H5RkwRB0uw9z420Phd3WTH8iL7FuoycOjNVv0yjPm9oCUl+AJQ-g3Ld$Rauial1NID+lt8fgUQ9wcLkEhMcqx$i5oYVcNhqSB5+mjRvL00Sm0BJOEJ$bL2SUvnDjimyRQDVPZAxfJi7SttqrpDKnE0PHwyfRexqHeHQLnHK5uSylFCLo-8nH-UGULWT5qTJjuUwwCB7wsENPTOFRQ8RGbQ-nvyVaAgvY0M908zc$Tp-TmHAXcJhLWAJkiadMGtFhjaJ1sDakQcuoM$kgKgIYlpQrFW0x4IbqNLE8a1j77vbM8pemWS9izhMHxrYbYmW9f3Y$ReQjXYZdVwVyYtrMwRzZMKYpncJqkWdSdgpLM4G2yWWAsDllM-uplzszKtHDx5bN7dKSr81D0G047KI+-mslqcWtmswUTez7TSq+ureq3jUneEK4eHHOQvb14FAAkRurtLyr8r+DLnj5Snf+dhizrvoVhPaBQSi7PgU5zCtkDVBeRyc9Rr5sW14ccAbzZ5q7TSEkJsK$oxRJVlzeix+smjZmc8CNOgUmGPDtHVn+$o84UnyzFW9NWSoURzRp5$G8yvbtT$0yNRUsPI+G9kyyTMkv3d$xPy39X+X5z75BHUM2Pde9wWt89bWHQdP9oKp5iaKSutdVMR7WvqfXe0vKiresF2JCgU+9w9gO$8kzRU0d7E7YA4XLf$t7MDYRitLFm$V4mbRTOwuT1$tXNBhE2ulOQBVF2vAxxSbNOSrtisgK3aToari8sMKCAQ-RcbyTku7H$h5seG2UT7ks1YMzdTbzfTg1XtNlFI83XEiGUeNz3UIIEz4BNz-u+zNdB89octls4oTNwhm-W32Db29NdUeFf2n98JFZeQRh7JhRfM9APyKlNCfwysOnPWm7kHGhg8fZQ2uViDKyanMTfksjCnzLSc34ASENiB97lmXxhbSpyXQz9S1LlHVsoeM0zodSXXtuPaMQOa+YRgT0MR5xjI2uS3T4+1SyVeasp8fGKe$Osa02cYlPATxHvDlSeA3po4lke1rjAppPQVAYMM2wDR0XLyJLrhau4x+d0TEuXqqzLZXF$5CCVtJ842HVVlqG$L5cbQ9EoPthVHECWfk9eslE5be3DISHNgWywvaWVvUbTIxTc57Q0cdzxWMf+RwdnGKSfxPieqvnyrP1Ee5-04HaAjfGKPmV"}},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Mon, 22 Dec 2025 02:30:45 GMT\r\nContent-Type: application/json\r\nContent-Length: 14\r\nConnection: keep-alive\r\nCF-RAY: 9b1c32f73fe52efa-OSL\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-chl-out: A18z0jYD5dAB/XIXKgF6Tyaaa71R1vjFBk2zNPU3o+3Rdw2pKaUqbnaQU++6irIJgUbgHGqbp2mHQFcHyZb2kg==$o/JHIK0HBch24+9t0OMZPw==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AxQ0SdRgVmAk3UY56Vdya5kWHUb09WK4IbeUOTYvrb1J%2FM4wRJdfXOJws4uJN9vHtyd%2F4xWs6BFT6LXyFsru2yvcxABNQQv8CBX1V0zayBsVvVUJeSEteqq4nTo%2B6tYkYvhuWUyXvoKUvPPb\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=446\u0026min_rtt=446\u0026rtt_var=223\u0026sent=2\u0026recv=5\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=2854\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c388aee5b895e903e82a624bb011e200","sha1":"35f272c9e20b19d540385f51d8e6a3d0f3ae5131","sha256":"3a77ba941559f70e32300f869db092307592a75e6733693e985ce002239814a9","sha512":"486ad8f4e805a2547f544cdfea1eb9362a0e7721d90c01e9c03f0bd84cccfd69b4999f1096e3d68895e2e48f0a96212c9a38cf93d5afee760e3d9bbce7c05fc9","ssdeep":"","tlshash":"90600000f3f0000c00c0000c300c000c0300c0c300f300003300030c0030f00c000000","first_seen":"2024-10-11T08:37:20.57558Z","last_seen":"2026-03-15T07:01:33.819158Z","times_seen":8854,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/favicon.ico","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:30:47.799Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://gazegaxirori.mofien.co.za/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Mon, 22 Dec 2025 02:30:47 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JHE1DUVFCDpGXwMkOFFZ76UDwbqmYPgTPMHvqi4eCCt2GMYlhmftdnq39R6mcpHT2olUTnisRD%2BXJccYtRVSADLHX3yrev1gNjsV0ECoxYf4jn5XUCH8gyfikgNaXMqIe20vjenCLF2hpzW%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b1c3304ba2a1a30-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b1c3304ba2a1a30\", cfL4;desc=\"?proto=TCP\u0026rtt=436\u0026min_rtt=436\u0026rtt_var=218\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=399\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5405,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5405), with no line terminators","md5":"b4433c645cb01e7e74fd5bcee1dc52e0","sha1":"fdefe5868913fe5099000b8e7e96d28d262c69cd","sha256":"5f431f23a3e643fc8bdf00e9ee175c64a2120ba81be7186137d94345fae725a3","sha512":"12127257db424dbcc47a6973b8cb570fedc6f23d870ba0bfaf5f4af9ec61f3f71d2caa769b9a2e5f0f3bf7521c484ac148e6d194b3eb90b016efeba113dae707","ssdeep":"96:PNybXZtIEb0EFW87Ie5i9NMNANciew08Ah53qRSysM2tFrP6BYzueh8Bmw:PNadBzOQA5eb3dysMKcWyiw","tlshash":"55b13af399026026e77a8ba34477b354f154f2a0cb06d55ce7a5e85cc3eed1ba0ad2c4","first_seen":"2025-12-22T02:31:28.084482Z","last_seen":"2025-12-22T02:31:28.084482Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-22T02:30:52.090Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Mon, 22 Dec 2025 02:30:52 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=S7LO20gwmpgsDluhorZzml4kGKy9qf%2BuKw6b1vGD7%2BvSBGlXtOmLuuFlMQ20Wp8e%2FY%2BVNwHbOdm1ppFoMdEKIY%2B%2BUg1qfyLTlq9fRVJdZsfUJHWxO5p4aCwdA3fiuY1YZg%2BZaOTf01TGViJ%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b1c331f89580afe-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b1c331f89580afe\", cfL4;desc=\"?proto=TCP\u0026rtt=491\u0026min_rtt=475\u0026rtt_var=210\u0026sent=3\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=996\u0026recv_bytes=3302\u0026delivery_rate=2393388\u0026cwnd=250\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5393,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5393), with no line terminators","md5":"2dfe9598c9251ccd20ad6b9feac8cdd7","sha1":"cc76a1ce78d85f7bdc2a4410b3da52afb1ddd2d4","sha256":"4df02469296f9f35add6bc7953dca58fe9421b06ac3fc73cb11f8bac277693bb","sha512":"1ca924886b395a2f67a88403384abdcd6d4469d69ebb58497c820551339b0f88401661b32bf236c2bf54d59a6c0873ea520a2930e88fb2ff254db799e07d07bd","ssdeep":"96:PNybXZtIEb0EFW87I374r/y4rta2AXYyG1/r5aCddgy2pVbrj5ZZ15Yzueh8V4rb:PNadBf/Vv/rQCH5+HZZ1OyyUw","tlshash":"cab15de7a4021037a3ba177780ab73489062b2b6db0e8296e691df1c96cff47446c5e4","first_seen":"2025-12-22T02:31:28.085311Z","last_seen":"2025-12-22T02:31:28.085311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/favicon.ico","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:30:52.214Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://gazegaxirori.mofien.co.za/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Mon, 22 Dec 2025 02:30:52 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MSXvvjiJXu1D8iIhQIu4W9GZT%2F%2BJQOJKfiMfj2xS4OKwmpf9k2SH2nHiqALcZ9ATfYP%2Bro8hTE%2B8LCPOAV72JGn1myOXAuOkbNmCCZf6jxp3RhR5%2BXLlOx0QfBhAlBUCX4lNZ0qPDCp%2B6rWp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b1c33205f72b51e-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b1c33205f72b51e\", cfL4;desc=\"?proto=TCP\u0026rtt=455\u0026min_rtt=455\u0026rtt_var=227\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=399\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5405,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5405), with no line terminators","md5":"194c6269219ee8fcc1f16de81f1dfed2","sha1":"0c2e1d71581c7b69e05cfa1a4f2f1c627c9e8d97","sha256":"9673f235aad333576bca13bd196f44a562fad0e97ce09dd269796522814a0731","sha512":"9c15860e46f58c48f795177c7d187ff61476d4c69a2f4ad310d219e1e69c1b3097ebd17ce7df86dbedf2a31bfd86867e673a95076e55e0cde41b994247a1e9b7","ssdeep":"96:PNybXZtIEb0EFW87IAFk9fbk9F4Kn72O+cWYwNuzx0qtvkDb5fPYzueh8Mk9t3mw:PNadBQfsFZ7XWHu10qtvwNgyzt2w","tlshash":"1fb13cd345c3101fe3a74bb79037b344a620e2705b0ad455ea959daccbd7e4b876e1c8","first_seen":"2025-12-22T02:31:28.08615Z","last_seen":"2025-12-22T02:31:28.08615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-22T02:30:45.254Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Mon, 22 Dec 2025 02:30:45 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WyhAhcaZ0AycHo%2Fwu6Ntu%2BJkXczCDKlTGXVpB7HmYcNWEjlXIXUkMnFZOx038lWz4KeTcuR%2Bc0Ne%2F%2FPkMWBU%2BZF0xNqQLTAXslH%2F3MlN0%2Bj0OsNBQOkB%2FzlqvvsUHu5o%2Fg4khjWVKHUHaWor\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b1c32f4dbc01a30-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b1c32f4dbc01a30\", cfL4;desc=\"?proto=TCP\u0026rtt=466\u0026min_rtt=466\u0026rtt_var=233\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=410\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5351,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5351), with no line terminators","md5":"fbadd3f83488652609debecef8e441cb","sha1":"a7fac4700a4ded98551c257b3390b015c9fa9feb","sha256":"3f1ed3a7070800a4b7a3acd0d0bd8bb2ae035cabdfe0475e3b30da2dd3316ede","sha512":"ee90686d8cf2aed6b2470affc94546072ec5b2662c34ad89b20581ffbb7931f7310b833ff969e5ba0d4ff7540c6310b177c831158c5171f606828c79f12e56cf","ssdeep":"96:PNybXZtIEb0EFW87Ie0Vx3dezKmN4a5lKRQU3e+pYzueh8yHmw:PNadBp0Vx3djmNXKyU3e+eywGw","tlshash":"c8b13be7e5501026e3a91bf244b7b344f914b675860641b6e2d1d49c87eff0bd62a2c8","first_seen":"2025-12-22T02:31:28.087005Z","last_seen":"2025-12-22T02:31:28.087005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/favicon.ico","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:30:45.410Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://gazegaxirori.mofien.co.za/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Mon, 22 Dec 2025 02:30:45 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=muPJ8vd9iwAIAoyH5DeUzKpweKsP1o7QehTa5cHOE2Kz0XVn5XwATFV9Ac3fFgnWqranRFZcqfrUMR1bytBruVdoTtK7dcfJAGtK1MXR2yOCe1gQQP64VZ9%2BmJJsu9iG53mCmWw4JATRfwWg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b1c32f5d874b1b8-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b1c32f5d874b1b8\", cfL4;desc=\"?proto=TCP\u0026rtt=457\u0026min_rtt=457\u0026rtt_var=228\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=375\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5384,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5384), with no line terminators","md5":"7dfaa79244e5922daa865873bd1f4eba","sha1":"7db6c977dda87e97f4b2b28bf91bf1c30d95b537","sha256":"b8f2bed6fb87535d392d36b3f5d000bed9e3d44825569663daa66fc5fdef41a4","sha512":"934d07fcb23225deae66c80e1dcbeff456ec53224dbd3148584ccad187efb1fe8020758e9c801bc6f9112012b6ccf229dfa08444f1f261bf79f4f608a8299f42","ssdeep":"96:PNybXZtIEb0EFW87I6VO9GFTXHJFMa2g38zcNC4LSYzueh8fmw:PNadBFnwIshE/yMw","tlshash":"91b13ce24d631016a3760a73887f7354f310e2d98b069494f6c5e85c4bddf5b9a2e4c8","first_seen":"2025-12-22T02:31:28.087842Z","last_seen":"2025-12-22T02:31:28.087842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b1c3303fabf2efa","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:30:47.733Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b1c3303fabf2efa HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://gazegaxirori.mofien.co.za/?__cf_chl_rt_tk=l1iGwDS2WgPyFT_T3yXhIOL5_Vyp4HEpAOHjagYJkE4-1766370647-1.0.1.1-OcQRZlC8N4H6xidBshSSxBQbNpa7IjN4hXOBtJC5K_I\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 22 Dec 2025 02:30:47 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8RHh6k5G7OiM3OxxFx2grsPcO1zntV7vXj1rY3CINzKk7PCmwfaTU23PAYWWkzErHSP5Qw6rTROQXiFxzcu6mrh4XteSrm3fFHTJb2m1HCScDH%2Ft4Lk0pLxdBI0nWH4WWcIRJIXnybqVD7rT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b1c33045a3b1525-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=422\u0026min_rtt=422\u0026rtt_var=211\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=563\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117932,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"12011120e461a0eb82abb85f6a030b33","sha1":"c1c46250a15994532e01414feb55260ebd3ee184","sha256":"153c1d5eb2873c3d140f8096c859fc7e35dcc592ac5ed8c069b8a61b68b673e4","sha512":"ce8d808c88aee2f17ce284ba7e6e3766060ece8218313361b90582e7d50267ac5715849a2456eb637607073aa77e6dfd05651b61368ce16dda5ae10cb21553dc","ssdeep":"1536:iA5b0SrqYqiLH6DsuEWG+vUG1x2cSJkaJgtQ97RORZaJIVJPABW7d1YJ:iAwulqA6DBEwx2cQSqcbaJGJIw7dqJ","tlshash":"97b3f88e6ddeb455036760b8106b74d971aa2c84302c5d2df950cde93ce0b54beabef8","first_seen":"2025-12-22T02:31:28.088545Z","last_seen":"2025-12-22T02:31:28.088545Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"gazegaxirori.mofien.co.za/favicon.ico","fqdn":"gazegaxirori.mofien.co.za","domain":"mofien.co.za","tld":"co.za"},"ip":{"addr":"172.67.129.184","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://gazegaxirori.mofien.co.za/","date":"2025-12-22T02:30:47.760Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gazegaxirori.mofien.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://gazegaxirori.mofien.co.za/?__cf_chl_rt_tk=l1iGwDS2WgPyFT_T3yXhIOL5_Vyp4HEpAOHjagYJkE4-1766370647-1.0.1.1-OcQRZlC8N4H6xidBshSSxBQbNpa7IjN4hXOBtJC5K_I\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Mon, 22 Dec 2025 02:30:47 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=474TSKgO9k0kkhJOX2lZNNNmeqPM5Qn12IMg%2F1Lf8CDUK%2FCPq8W6MxBRgmG3qL38e3smdUR5b%2B5TdhvcxkWfg6NjIp9NP%2Fn%2B%2F7Nw1YM%2FB%2FVAUy8oJOnthZJJMpS1w8plL1uoRZB4Vehta1Lx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b1c33047a561525-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b1c33047a561525\", cfL4;desc=\"?proto=TCP\u0026rtt=829\u0026min_rtt=422\u0026rtt_var=223\u0026sent=35\u0026recv=21\u0026lost=0\u0026retrans=0\u0026sent_bytes=47837\u0026recv_bytes=1084\u0026delivery_rate=39167213\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5533,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5533), with no line terminators","md5":"b3ffc11b2de7b4f6cd0610fcebbb8679","sha1":"f0da10790772477d91fd8e86eaa80b381fe4d34d","sha256":"76841954f4857762ebf779b684e27374d71f68aa09761f82fbe5f6cc1014c1f0","sha512":"1a293e0c20ecf281d8116a0bb377f7db1354be4aed7a812ee098b80e254ebae916dc8f3dc5620e92e6c42dc01b8aeefb250cff39ed3b61a62fbd1be63c0c3454","ssdeep":"96:PNybXZtIEb0EFW87Ige7YlkzLyoqtOjc5vgnJFzFxAUYzueh8D/mw:PNadBU7YlklqtlvgnJtbA9yd+w","tlshash":"5eb15be7ac91201be3fe0ab7053b7348e124fa1197019871b7d0ed9c92eed1bd51a2d9","first_seen":"2025-12-22T02:31:28.089283Z","last_seen":"2025-12-22T02:31:28.089283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"gazegaxirori.mofien.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}