{"report_id":"bc272623-c2d6-4cf9-9601-cf5a93a4b5c0","version":6,"status":"done","tags":[],"date":"2026-04-21T03:39:12Z","url":{"schema":"https","addr":"anonfilesnew.com/","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"172.67.209.222","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"anonfilesnew.com/","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"title":"Anonymous File Upload - AnonFiles","dom":{"size":9093,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3435)","md5":"719452760f2912a38b265efbee7e3b55","sha1":"eaa4dc6b1a12623587599d2cd4ed853f4a6c57a3","sha256":"b48b4d52f6f161d5075c8ca51531dba347d354620e82309d7ab588bb419bf084","sha512":"0a98483eb9f138c199f9f489ef1bbc1ba14c426c09924260eb07ac39db6235736767bf37307515a2ebc4b11071ee2888b787b2303b7c73561a053d5145ffdbe0","ssdeep":"192:GXK4kdCRZ7ZEdYY8JIbcUdm/sGkyr9YSVh7ZNREDy:gK5+Z2YY8JIbcz/sGkyr9YSVh7ZD","tlshash":"3512deb34349155f8712d9d46c71391ce083111ecfa29c52b28d9a5baf92f92ccf68ee","dom_hash":"domhash394da58ce73c855534e281fab58eb06a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"anonfilesnew.com/","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"172.67.209.222","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T03:39:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-21","alert":"Hunting_JS_WebAssembly","trigger":"anonfilesnew.com/js/utils.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"anonfilesnew.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-23","domain_rank":0,"first_seen":"2025-10-15T23:48:55.007182Z","last_seen":"2026-04-07T04:28:50.681496Z","alert_count":55,"request_count":27,"received_data":1413898,"sent_data":15400,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"anonfilesnew.com/","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7ef8f1ca696f50ce795546597216ab7","sha1":"2be00e117a89ced86474deef2822f99dbff399aa","sha256":"08ee7211d0d68a49d55b90231f868b8624c6ac708f0f9ccdf85b2f60a232d7ff","sha512":"f7db32aa8f77e46b232c3589c881081001244279f6587626b2937a3be657b970ea133fc09cbd29f74d64d8f823fc647e28c6031acfd707c66da812bf050274f0","ssdeep":"","tlshash":"55c08ce3838d81038b0093dc6a2c6004808fb93d2ec0fa95a285e6ee893732424f37cd","size":173,"data":"","first_seen":"2026-04-21T03:39:16.9296Z","last_seen":"2026-04-21T03:40:01.848638Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9bbf200e753b2725b4f1e7aa28a031a4","sha1":"05eb47c698b4573c1f68df2ba55ad661bd0e076d","sha256":"22818da5a5bc13aa23f50572cdec1a8bcbb41d84b1ebe48d42e07c920c1453dc","sha512":"5c994817f8412088a3206d4a5f0522718fe2eb3566fd9164b5caac765a6810ba517ce9afea2e89a0fc8bdf2035fbe37690ca3db547d4a9ae155710a690d8be7c","ssdeep":"","tlshash":"d821d3956645577a0a0186fc7a7fad1c7568004d9ec0667325984ce5f0f0d804fff8d4","size":1277,"data":"","first_seen":"2026-04-21T03:39:16.93082Z","last_seen":"2026-04-21T03:40:01.850031Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"912dd7dc3f87d6640268bef33dd9d264","sha1":"9a9c6ce0ced38a645f076658bf4f329501c1a2e5","sha256":"79a0e06425199d04c5d3a5956664312482a4aeaf581492c886e037153ad2869c","sha512":"8d1e9b6db28fdb8a6d67b6f01691c0d0b9df2cb6a445de21a27cf3e8445f42f94f313f1a562a47e8afa159ad718dafb53ff51dbe8e45a32e6f7dae2ce4f9789e","ssdeep":"12288:JS8VBjSWMSNPPAcdiJbqcOmRHpVWfYMs3Lv+HXc30bg0kK7FK+5Hltbf6KquCp4Y:JjVCqq","tlshash":"ddd484c493ce6c3241f286b40d32d48ca82436e65785bd5e7a53f9e6e1289706cfd3e6","size":605057,"data":"","first_seen":"2026-04-21T03:39:16.932154Z","last_seen":"2026-04-21T03:40:01.847169Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/js/app.js?wspeed","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad60ff8bc61abd044f02250b04ca3aec","sha1":"e3d6396ec490cd355558c7271d5343ce56cd7b14","sha256":"0c94ed50034be4776ba63ca0f237b3adbd2ccf72e0e2be7e4f240f655ddb2311","sha512":"eb46c4f9fc3d250263fe6eeadea6f9fe1920196624c961dccc44211ae53079966d8f986f4c6ffb232c90de32b1e8aeebf59a65dba1c3cec1516a667a3ce4a0c2","ssdeep":"12288:c1mAyV4Q6ki0a2TSWMSNPPAcdKBbqc2mRHpVWfYMs3Lv+HXc9Qbg0kK7vK+5Hltl:SmAQ4QThp","tlshash":"3305b6c963ca7c3141f381b40c37cc5ca52036d66f45bd1ab553e9e6e628a706cee3a6","size":804765,"data":"","first_seen":"2026-04-21T03:39:16.905448Z","last_seen":"2026-04-21T03:40:01.830159Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/js/utils.js","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68a606b2e0fd2d66f395f1bd94accbd8","sha1":"152aadadb562cb80133e328fe180053e9084f311","sha256":"c27da61d022bb052ccae848564fbdc711b15858fe35bd989bee34cfd4041bcc3","sha512":"95f8132fa25653d859ae2789a3c7ac77ee8b4152b7c1be7a04d65251c69aace83ad3c35cf5f508a06a911ecc56669bdaef214a29114792de8a766975e35be1c5","ssdeep":"6144:LRvqShnJJMeiM0WdoqpN/7VeMHlC3IXa8Ak0WAxXuLJGwJKxbyYF1LBqVKBaQHEP:C6ocN/7wgCD8IX2JGwJKtyYF1LBqVKBA","tlshash":"ad647d557163fc7623a226d0b06f220bbd59294f90d85cb4f588cce5f8a185c899bff8","size":322122,"data":"","first_seen":"2026-04-21T03:39:16.912556Z","last_seen":"2026-04-21T03:40:01.836014Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-21","alert":"Hunting_JS_WebAssembly","trigger":"anonfilesnew.com/js/utils.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/js/marko.js","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19c9f73cfedb121253a9aa174ec0c0be","sha1":"c765246b83e292dc50ad52ea6d574c488fdf646e","sha256":"a659035e8c6d68e72e96762758611379fa082fd1c7299577ba9f7831b24fb6ee","sha512":"4eabce6671c29c483a7c3f16f3c945332b98a1ea997f8e7e3498f32efef390b5249aef1e58aad62c699784082eb34f31eb7e23806cf831bc610f4eab14fc7adf","ssdeep":"192:3DwBmWqIOQcejbeazAm5x/r3k50sbDGhMzMrc46rGeXhp7hDMBlNptt1yLjzFOLn:3DwBmWqBi7YZhwBlNp/pBBPOqe6","tlshash":"034200c7791749de0f9734bee805cac230bba46e6de4cd5361c8cda406895ad032be76","size":13184,"data":"","first_seen":"2026-04-21T03:39:16.895958Z","last_seen":"2026-04-21T03:40:01.842924Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/se.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/se.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 943\r\nlast-modified: Thu, 12 Mar 2026 17:39:06 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa3a-3af\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZprL8yrrOqyxq5ruPmUgPSPFrjk%2B3xpYKpydWgcSvCaH2NmE09GbBZzxtg%2FmQ81HK4GF7W1GLhi9h66DBXptygIHpguny%2B5SP8bYpOdv8tUAq4ei6127tRk%2BXPdU48pCeNz\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 4275\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb38d980883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":943,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"a873d12524aee92539a8ec8cccafdf34","sha1":"a365303f8f72761adbd317fc22035f0aa2cd0f49","sha256":"2487efe41d6c538d02a39726e2ed27104ddbecaea5c2c85358f2ceac2c1ad31f","sha512":"b76639884e261c0f60892a2d0a9145b3412b8b092a38cd9c2189e6b3f3bcb847c8dff3e41d04e290079ca5e86df2efd76adfa17d776586014133a658a80196f6","ssdeep":"","tlshash":"961184b127e318e2c518a33b39f45092b4301d606862a3cbe869ae291a50c4f68d830d","first_seen":"2025-12-15T20:51:39.339099Z","last_seen":"2026-04-21T03:40:01.833193Z","times_seen":29,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/js/marko.js","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /js/marko.js HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 17:39:07 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa3b-3380\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TIdvxCnbrVSlUyxhauaFYMwPgDX3dljVhFX06jNUW%2FcFuOHHirSCKynVVBmxpCidlNQR4HZG12Ztqdgb30htH4OsD86enbEhfkVY3TuzgdpyII6Ha%2FywLb7nibgoEfKg77IM\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nage: 6244\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb36d670883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13184,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13184), with no line terminators","md5":"19c9f73cfedb121253a9aa174ec0c0be","sha1":"c765246b83e292dc50ad52ea6d574c488fdf646e","sha256":"a659035e8c6d68e72e96762758611379fa082fd1c7299577ba9f7831b24fb6ee","sha512":"4eabce6671c29c483a7c3f16f3c945332b98a1ea997f8e7e3498f32efef390b5249aef1e58aad62c699784082eb34f31eb7e23806cf831bc610f4eab14fc7adf","ssdeep":"192:3DwBmWqIOQcejbeazAm5x/r3k50sbDGhMzMrc46rGeXhp7hDMBlNptt1yLjzFOLn:3DwBmWqBi7YZhwBlNp/pBBPOqe6","tlshash":"034200c7791749de0f9734bee805cac230bba46e6de4cd5361c8cda406895ad032be76","first_seen":"2026-04-21T03:39:16.895958Z","last_seen":"2026-04-21T03:40:01.842924Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/de.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/de.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 881\r\nlast-modified: Thu, 12 Mar 2026 17:39:01 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa35-371\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iva6kPAIsihWYO2lk5HCKcZQ5fNpqgCTPMpiSw0prsmQx42uZ3PAgSf6F3yCYOqmv6WLcXBwsRh8ni8QTkFWiA27Wd1G7%2Bj%2Fdrn30bXcG%2FpqxRPzmfCSs%2B3VkzUC3RBdU6MF\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 4275\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb36d740883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":881,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"034732fa690992352e2c7458affe3ab6","sha1":"c7a59516a3d28811117a0f05308311e9d640d6b9","sha256":"5a179469b0cef3670083d24f30ad4b978854d43098fb7992158510aee970287b","sha512":"f0cbf0d17acd28d3b0a7a8c83e27b3dd523068276c59a6ea404b2c07bc3ad39a000312453cb3648330a23a6b0f90c18fa032f5ecbd1e65771cfb659306641507","ssdeep":"","tlshash":"b211969b72333e70e2b05e35d011648ec8b351297baf346139d002ab20681b800586cb","first_seen":"2025-12-15T20:51:39.338001Z","last_seen":"2026-04-21T03:40:01.823646Z","times_seen":29,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/dk.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/dk.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 815\r\nlast-modified: Thu, 12 Mar 2026 17:39:02 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa36-32f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KiVrcvGpEiutdYZHeqhJp6Wm1rXh3MewzjbuORxWi445bWuhPm3zBdB4TiCz4f59K8%2FjMxMBWf%2BmnvB3Kz%2F7Qbwlxp4hyFkvNcfxWUdy%2FtAz8SMqf%2Fwuso5IcGZdXgQ13vkd\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 6252\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb38d990883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"e470a318ec907fa1f00816897730ec59","sha1":"60d2a6e3578247d5e1f36ec2ba177f3609944ff5","sha256":"01faffd3f99288e4d3ca3589efa1d12b1e154d77adbbfa1cea5f05cfa9fec7d2","sha512":"58b8ed55e2b7571202bddc53f9783d79c4686c0bae06bbd9f047b3ceff6da2b3e634ce957fc0e887abbd73648e967b26fb7153cb2dd5e5ff11e593a0e1f90f19","ssdeep":"","tlshash":"240175ab29367d44e87a94b3cb9e4146e66dc12e2cef63232651eb3115e3ad0028a245","first_seen":"2025-12-15T20:51:39.34009Z","last_seen":"2026-04-21T03:40:01.8203Z","times_seen":29,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/fi.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/fi.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 726\r\nlast-modified: Thu, 12 Mar 2026 17:39:02 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa36-2d6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eXvtqgllUhdUsT0h7kBkw1uQw3BsanZDamj1w7dwSryVOYFOVVkGhmOSghx%2BK86gTmonDVi%2Bxyick2kD5GPr6qIXQhqe3JQxYYI1au4z1YRb0oqYrQjU2zp2JyXW2K7um47Z\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 4275\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb38d9b0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"38303838b2627e7d60c1c226fc896628","sha1":"423cf2044d65d6d87738bfb6a2cf3680aee50ca7","sha256":"f3c5e57604ee74e788c0681c4c2776ffdbdf3055891245be9243befbee8c2a61","sha512":"576cb7cd733fd5dd76c239283330e68e2786be50bd7e05fef5bf7d68b0531c83b8c87be0aa0d02888d0b0e53db8ffa42cf9b79697f08e9fb761fc9cb72247f99","ssdeep":"","tlshash":"9101948abf76c998e453c233ccc81a52eb00421334c38b2b44e2ce7a4fa06448745281","first_seen":"2025-12-15T20:51:39.355027Z","last_seen":"2026-04-21T03:40:01.846131Z","times_seen":29,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/favicon/favicon-32x32-anonfiles.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:51.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/favicon/favicon-32x32-anonfiles.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 1309\r\nlast-modified: Thu, 12 Mar 2026 17:38:50 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa2a-51d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mLujIyO%2BvWdZrcyB%2Bo1nsCte5Tfyr7rnebrD6FdZ3AWlV0XIttA95x8VV%2FbZwah2qgnPEsoRogkbRV23mAZzFyhA7ROIQkw5pVzuQdysrwqwVImM5kUagFcOS63Jg50mVIXC\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nage: 2765\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb4dee00883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1309,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"ee0e6dd4ef643128a1b7bd4ab32b8a79","sha1":"8136c70aac1e50f8356c83f91fb77ea4b6596cbc","sha256":"51f305558b4ed6fcf3a31b4f9e404fc2ea426cb5e785ac46ce827de0c5cabb4c","sha512":"f57a1882e4d57f6cdb67fc5b8ed61d0dba28f000af87644bfd402275958163b66f7748b83e4d78dff72bb8edd9077c3fe67f5e831a6b79bce72ca4bd1d086b34","ssdeep":"","tlshash":"3021d5ce2b90943586ff9b4322860470fa474de4e65c3857fa16b9ab26c75f1214128f","first_seen":"2024-11-15T10:15:32.710574Z","last_seen":"2026-04-21T03:40:01.835287Z","times_seen":35,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/js/app.js?wspeed","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /js/app.js?wspeed HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 15:45:32 GMT\r\nvary: Accept-Encoding\r\netag: \"69b4311c-c479d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ps%2BMQ0VK6or21m3b3M43jkL34ciEj%2FYXGCeiCnvIe7jGdzWjrHL66jNOD4HqspOkZAflgknzcQ0My5gsDIrS1W1luenlO0k4Th7eisRjkYOrWAIv4cfnpwrkUEUzmgN3HvY\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nage: 865\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb36d6e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":804765,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"ad60ff8bc61abd044f02250b04ca3aec","sha1":"e3d6396ec490cd355558c7271d5343ce56cd7b14","sha256":"0c94ed50034be4776ba63ca0f237b3adbd2ccf72e0e2be7e4f240f655ddb2311","sha512":"eb46c4f9fc3d250263fe6eeadea6f9fe1920196624c961dccc44211ae53079966d8f986f4c6ffb232c90de32b1e8aeebf59a65dba1c3cec1516a667a3ce4a0c2","ssdeep":"12288:c1mAyV4Q6ki0a2TSWMSNPPAcdKBbqc2mRHpVWfYMs3Lv+HXc9Qbg0kK7vK+5Hltl:SmAQ4QThp","tlshash":"3305b6c963ca7c3141f381b40c37cc5ca52036d66f45bd1ab553e9e6e628a706cee3a6","first_seen":"2026-04-21T03:39:16.905448Z","last_seen":"2026-04-21T03:40:01.830159Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/br.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/br.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 2041\r\nlast-modified: Thu, 12 Mar 2026 17:39:01 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa35-7f9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pZGddHgV7O5KuHwkkiRFSCoFLIjFvtrk7%2FlgDovMf1GGJA%2BXFsK9p2Z727QcEfdfZJTsRjh6Dy3QDkgMajAc2Gec1FGXkz3RkhLJLBYK8HUpQshhvV8wX2VqgpIpHNBcuNgh\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1317\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb36d7b0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2041,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"ae69f63791439c1aa874bde1f435d786","sha1":"057eaf3eb21d73655c21b41d212fc33d75ceec45","sha256":"d908af30f785de8a03e2131626fd918d60caab8cdb3a22dcfedc64bf12650d0b","sha512":"5afe37a350d34793e243dacd6d660a6517fddb63245c96189829a186dda700b320a58495da806c5d2304f1d3ff0c82e92756255bb74ceb834d91cdc1b4074a7c","ssdeep":"","tlshash":"ad410b09f7dd6e7bda7118315d9c0999a42f8c2c0574041443e47608173623a576cec7","first_seen":"2025-12-15T20:51:39.395142Z","last_seen":"2026-04-21T03:40:01.834601Z","times_seen":29,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/ru.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/ru.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 531\r\nlast-modified: Thu, 12 Mar 2026 17:39:06 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa3a-213\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kOHEKyNCzw4hGJMZI2ZDBt7fhLmpOZEdBTeb4T%2BXnLRyOsGgmwHOMB33LfuPD%2BAhL3BXFeJGLUk1awZax1V7yyfeUFferOy18KaRXi8%2BlmDFtppVkpdT8qZsDZlHkm2ri1rk\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 6252\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb36d7e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"ab7c346ac5f6859373d3a5fe3647e131","sha1":"745a1a8ffe6e64d103e6b75f244126530aa493c5","sha256":"4817c9868e743a509614500334319b1a1b3c27b49923190e659679ef575fceb2","sha512":"6ddffea3caae09acf0cba32fd372ed0bf6f8bee7a5c068a8750a5502a0b3347ee85510741c7dbf80ecaace96be181fe519427c9e68a4674fb7fe18867a31f9cb","ssdeep":"","tlshash":"eff00e6a9248be6dc2c4b0bb8d694085e10590122936248f65c7dafe10219e8e83a6a5","first_seen":"2025-12-15T20:51:39.363118Z","last_seen":"2026-04-21T03:40:01.837234Z","times_seen":29,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/ro.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/ro.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 1358\r\nlast-modified: Thu, 12 Mar 2026 17:39:05 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa39-54e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G6DVEOWu4OaEu9ZdgloWR0eFkkyoB1u6e4hk7v5ArLPKNTTcMUF83%2BNAjGrTRvMGCs8btnhAjpVvUzx59T5GrhyZO4OzAstU6xnA1xUA4ZYwaYt%2Fq2vZtSRn3MEYp83lbFr6\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 4840\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb37d8d0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1358,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"53d36bc210553f06abbe48e16563ceb7","sha1":"29926d6aa329c0c94003fcaadecef351d4502258","sha256":"0f7ea4850d824f130b1581159aee9861c081f0729e5785d90bcad6de9958a2e4","sha512":"b0eb94b729662b97010dce80e9cb0a7f0dfdffb8d76220a2aae30c4fb8be98e3edd4c144b2ebfb5b01c2bf52e01533f577802e1fc1c826075c355fc600aa57dc","ssdeep":"","tlshash":"3d215362a86479e4cb89fc3648901462983f53809476e7ae9509d82536abdc03c7438b","first_seen":"2025-12-15T20:51:39.397279Z","last_seen":"2026-04-21T03:40:01.832429Z","times_seen":29,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/fonts/glyphicons-halflings-regular.woff2","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:51.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /fonts/glyphicons-halflings-regular.woff2 HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://anonfilesnew.com/css/anonfiles.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18028\r\nlast-modified: Thu, 12 Mar 2026 17:38:50 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa2a-466c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P2Mzxds2eVIXLmoICBterUcKNIH8Uq9OnFAfUSc8LluSPwQQFYTdZmyiTjq5dVJTO%2BEOuN0HgdNILC9RHCFd23TXclHr0yXaDG%2FK3eEKL7YubUkJnBkH4HtGoE6guwOpjbY5\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\ncf-ray: 9ef95bb57f7f0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18028,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18028, version 1.589","md5":"448c34a56d699c29117adc64c43affeb","sha1":"ca35b697d99cae4d1b60f2d60fcd37771987eb07","sha256":"fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c","sha512":"3811804f56ec3c82f0bef35de0a9250e546a1e357fb59e2784f610d638fec355a27b480e3f796243c0e3d3743be3eadda8f9064c2b5b49577e16b7e40efcdb83","ssdeep":"384:Y22oezK7jlf4flnEPn9+1z2DIH6r3lEsNgV:Y22oeKjlCnm9+1y8gA","tlshash":"d082d0f4ea92999085b01c37d19acb48dc87b9cef5a4d01611e4e13eb5ff8ad684c6c8","first_seen":"2023-04-05T16:42:51Z","last_seen":"2026-04-21T10:33:41.144364Z","times_seen":39445,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/css/anonfiles.css","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /css/anonfiles.css HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 23:30:29 GMT\r\nvary: Accept-Encoding\r\netag: \"69b34c95-2c5b7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YYQCZq4HNh7N2rKHS3UU2JipzK3Ogrvf9FaUu3Z%2FbVScobP7s2p5wHQCA5AeC3WSNe6Z7SBQMnQCUW4xO%2B2qgMvDMHO7FnPcO4%2BRMrEB4aB9npBU7vDkwMl8md94yACnLJ5y\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nage: 3884\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb36d660883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181687,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0f05c128f2568453b30645dd7f0af025","sha1":"a30ef4a52bfbde07af55863c01d7d218a8d108b8","sha256":"6cce3c2855a402b687011a164cb419755a5a2c3db68e6ffbcee9f2f8f5bc98aa","sha512":"a41f45a21c1cbdadc9d837c3c10bb1558f3c8c5b5075a959afe40bbeffe427d7ce8261678d990df03a515504411d74361f73ee2daba4601ec2e247adf6d88bfe","ssdeep":"1536:qUnzbLpz3JaFvVXbxJrS4TMzKxOEQxH1wbdNHBFAwUX+92KjAMrXrxjhkpZO4dJh:S7xjhkpZ22","tlshash":"2a04b766b20032457213c49d7de3cfc25b29a283e116fdbeb99764acc34d5880676fa7","first_seen":"2026-03-17T01:08:58.72127Z","last_seen":"2026-04-21T03:40:01.817546Z","times_seen":14,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/js/utils.js","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /js/utils.js HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 17:39:09 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa3d-4ea4a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ftFGP00Az59OZp%2Bif2PmdVcbe0MsKm0OQ%2BRNM%2FUR2cGlxy4a8KS4Sql%2Bgz%2BqSMu%2FvPxY%2BUo%2BxzpaC7zYsj2QmuIf7WhpSIAMXzErrO97uDXxPVlAjHwhOsSly%2BYDivj%2BHMlu\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nage: 4617\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb36d6c0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":322122,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"68a606b2e0fd2d66f395f1bd94accbd8","sha1":"152aadadb562cb80133e328fe180053e9084f311","sha256":"c27da61d022bb052ccae848564fbdc711b15858fe35bd989bee34cfd4041bcc3","sha512":"95f8132fa25653d859ae2789a3c7ac77ee8b4152b7c1be7a04d65251c69aace83ad3c35cf5f508a06a911ecc56669bdaef214a29114792de8a766975e35be1c5","ssdeep":"6144:LRvqShnJJMeiM0WdoqpN/7VeMHlC3IXa8Ak0WAxXuLJGwJKxbyYF1LBqVKBaQHEP:C6ocN/7wgCD8IX2JGwJKtyYF1LBqVKBA","tlshash":"ad647d557163fc7623a226d0b06f220bbd59294f90d85cb4f588cce5f8a185c899bff8","first_seen":"2026-04-21T03:39:16.912556Z","last_seen":"2026-04-21T03:40:01.836014Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-21","alert":"Hunting_JS_WebAssembly","trigger":"anonfilesnew.com/js/utils.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/nl.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/nl.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 824\r\nlast-modified: Thu, 12 Mar 2026 17:39:04 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa38-338\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gPv2Wf7TPJiTiQDZu5i2JBnI97bLwXYxGzhFExqrd7twNjUffwFPKJ%2FtXPmeTkl0Qp3QaSI2p5Wq64owPqCKXd%2BApfvBBvmuEhcIFF3lLeTR%2F4fvl2bSBvokU1S5IjgvHqal\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 717\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb36d750883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":824,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"e0cf1cd19b4161fe1f10b5828bae8601","sha1":"d480a8001b30ef1f4bdb1b6dbd8f9ea6b9d65831","sha256":"8b4517eecaf5c26091f8e5da6cf6f2a2a1a048c1ff9f6853a3e1bde849b71082","sha512":"f4c59835625cb52fe3b4db5d6d056780a41bd20bb53b7dc3a718af9a00c7240f61e790fa20da3f7336495ae97c8e9dfca1873b9cb14b79c54183953670fde5ab","ssdeep":"","tlshash":"4f01d6c340230defd230a78f8bc63172a27f805742a1605be74793304920af82908398","first_seen":"2026-03-17T01:08:58.710518Z","last_seen":"2026-04-21T03:40:01.838728Z","times_seen":14,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/fr.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/fr.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 1244\r\nlast-modified: Thu, 12 Mar 2026 17:39:03 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa37-4dc\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v3PtAfGJm0NsR2XsKcJ2MzpUUZ8SNGdvPqBaxiHEIQTKRSK6PBxfcDWI%2FhYBn3NHV2eGr0A9iVV2yQszzJch9EmT01WEfQseT9k%2B%2FNnZtXrktj%2F2uphEGCrbA2MiiKXwog7y\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 569\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb36d770883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1244,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"afb9124f6b30449488669232d06d5604","sha1":"a81743ea25a71871c3296f318cee4fa1196562b8","sha256":"bb10761c3de3d0a051e8621965aae462bf5f1188d03904c0f2c9208b4bd53692","sha512":"9f0adcb87a925893a649a4275c6a3e0b086d3fa3c311d15aff5bc578ba1b4588e75cbef087dcab2e7b1a4043bae932d26118ae62c6660dd9089cd0695c3ded58","ssdeep":"","tlshash":"812184b2128ce57ed0a7eb768bcdf3912925863929ad84b37c4443792ba0d1905ba701","first_seen":"2025-12-15T20:51:39.359016Z","last_seen":"2026-04-21T03:40:01.839475Z","times_seen":29,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/my.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/my.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 1455\r\nlast-modified: Thu, 12 Mar 2026 17:39:04 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa38-5af\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8FUcsmAIi0OBBrXPfz3AtndiCVfVVcwTWj%2BMPpTqGr5D0BcMUCQurwQXSqTGw%2FA9qJFKedVHBc2uddUT25Rvbi57o%2B%2FcP0YpJW%2FYfBl0Z5EOaQwq9esxuwRc%2B4acqg7hZbnA\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 6252\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb37d8a0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1455,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"f97dc13a79b47ba6468396deaff7b2d2","sha1":"a418a559e4b8dfbe165cf9f4ece427b0808cd651","sha256":"e359ed6b47cbe6bc57eb9b17f4691e31969e2cc82a1fd0c406ec10c0b058f9af","sha512":"29b0bd6edc67cc7720b4efe69ccf40362c9c9c071af986b051b0dd5f44136af9794b4948ab253be9d0a2dd06ce857a1109ed9b5094a8a9008cb5ffb47eebce4a","ssdeep":"","tlshash":"ef313bbf55f2f519c0484130a954b632bbd60dae0e9cd0c0f1c9dc7d9c7055452a0657","first_seen":"2025-12-15T20:51:39.401541Z","last_seen":"2026-04-21T03:40:01.8404Z","times_seen":29,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/es.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/es.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 1466\r\nlast-modified: Thu, 12 Mar 2026 17:39:02 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa36-5ba\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NKkuvHKMrGKWolvU22zT5U5ZSrAlnArGV70S9dvDnWJAGA9smHbh7fLWidnKR9cRmCnc00v5Rta05lk2EFCcLtXQJq1%2B0BWfQhRFzhK6fRCA%2BHkENbwVrOgD6ySg%2Fdi9q3qN\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 6252\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb38d950883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1466,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"3b2becd06e0b44b26c8845de02280c37","sha1":"c2720ec365dc33d8e38a36fef39d4014f7eb5a8e","sha256":"57e094b0eb9895b54d4b50acd362a7ba29be26a1fc5168a051b2b0d1de25edef","sha512":"852141152ab5132c9d80fcf5b6d0978e9d650530c34b4451b54800d67e8a4bbbdee524f70668f16a0b1534ebe28ef552189bf6d51f778646d2333d2292f7820d","ssdeep":"","tlshash":"ae311bf1d0309f71c77c1ab60bce48c927ae04870aed32343a535f0c7506d11665d01d","first_seen":"2025-12-15T20:51:39.334947Z","last_seen":"2026-04-21T03:40:01.827298Z","times_seen":29,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/pl.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/pl.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 470\r\nlast-modified: Thu, 12 Mar 2026 17:39:05 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa39-1d6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KGUYAFC6OKfyCEjvlcgoKSUNHU0lzbd2L8c7cU1l8dnDM3ahAx0WpILW4F40Gw2YG2%2BQzWTxf6aV6dR4M5YaB44voNiwbXC9oVuFvVK5c720QI7aojNOtr8zEn5l2dQcpmuw\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 717\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb38d9e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":470,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"fec82de076ac2923fa330082dd72fcdb","sha1":"9c011ccb4652c146d339394ba50262be4ff7f4b7","sha256":"8df079d4ca53c0fbfca133ac513b60fa42df5af70aa27b39e7f80ba64e0f534e","sha512":"01e50d92470b9b73b93e917e0069cff1f424e08afc1cac4331e573f49c6f8ff0876d7d82df3f123932d8ea47a49918cfce25adac93bc29d37657064974d2349c","ssdeep":"","tlshash":"b0f0a3537247194bc4815933118e4925e536857c2572735ade109c56d612218d6f11e3","first_seen":"2025-12-15T20:51:39.335933Z","last_seen":"2026-04-21T03:40:01.821826Z","times_seen":29,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/jp.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/jp.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 1010\r\nlast-modified: Thu, 12 Mar 2026 17:39:03 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa37-3f2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nrPXbnTgLr7HQ1Jhwmp2tQ8b%2BMO4sHymUYv4vzQDcLDlfUOnIYLFbQ58%2BprV05aSMniIeuZuF8d1bvxBhR1OKl7Ir4tYen7mdBY9Plf1h1yzS8RzzOF%2F3niwio3epTGBHogV\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 4841\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb38da60883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1010,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"3d3dec5bb0d92bafeefe843e4e430e32","sha1":"dbb075ecdb1910098fde0b5063bf7ac9195363d7","sha256":"6445419e2101be8a0ef0e582f1ed3e913a4452914518e119672ba023542cfc7c","sha512":"733f742b5dc4ef951b0ecfc83a04597fa83450a27fcfd645a118e87cdc515a457ce1080eb63cb7f7504b81256711fd37127f9361043c8313d7524a6667733627","ssdeep":"","tlshash":"4011217af2bc5a70d138c27e83d60caef59751df352a440687968ae22614890e977507","first_seen":"2025-12-15T20:51:39.358107Z","last_seen":"2026-04-21T03:40:01.83394Z","times_seen":29,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/cn.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/cn.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 1119\r\nlast-modified: Thu, 12 Mar 2026 17:39:01 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa35-45f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Azqo0jNKPxAcKpydIuQq97ijoean9IIXls%2B1P60k4%2BcgQxuTnX792O6JbWyOkrFisV1lV7sbtrIYNNMcN8KgUbRiKSemxDTOvl%2F6G7rBIJI3D3LrPx6Ie5GIsN5YU4N4kNZE\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 6252\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb37d870883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"281a73770935d3150bc1d31e5a1cc0b7","sha1":"e7859157e42aa0d72c5af2f39164e055a7426c6c","sha256":"76414ec773c668dc32d859cc85064d2d872ec19e714be18edfb1c7ed5e49ee30","sha512":"8f518eaddb1cc5c77bc4bcea3333a9aeb525ff8a218311a48574b4e9396378b1d56036ea899aa22ffb2467dca81a136b4158ba890206d4a581a05742174528d7","ssdeep":"","tlshash":"4721d89ae2c9fa55d01a5d7f475cf0debf65b8c7975fe5e203849f431062a1398840c2","first_seen":"2025-12-15T20:51:39.364406Z","last_seen":"2026-04-21T03:40:01.826414Z","times_seen":29,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/kr.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/kr.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 1591\r\nlast-modified: Thu, 12 Mar 2026 17:39:03 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa37-637\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O74faBlqtkSP6HRa874igDLqf4unAelS4RaA2wRgkJUMo3yxDo0QyYeLBO9Om%2Ftl%2FstvPnAndJ997jXIHxMHDxIlc2F15LnBfGRTWhkZewVKZ3CXm5AgV4Z0%2BZc81aJ2Wht6\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 4275\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb38da70883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"626b04a7623d0bc55693b1fc10e1804b","sha1":"22a2b34e8ed29f860543ae243ae27826d2814786","sha256":"e999c87717d674d7075e7ae4ecb538637b7998bccc1ddbff72ab7244017989f7","sha512":"aca25b5c867438c73a9989ffa243b721695784832095d8a919ab238a3a539c97b7dfd22676bea415247318e41911218dd0d715060abb840531de533b595fedbe","ssdeep":"","tlshash":"e431e71a73ecc871d261bcbdab874262a4554b33f626cb2a02e0c4a4f74a092235ce40","first_seen":"2025-12-15T20:51:39.349986Z","last_seen":"2026-04-21T03:40:01.841238Z","times_seen":29,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/in.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/in.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 1115\r\nlast-modified: Thu, 12 Mar 2026 17:39:03 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa37-45b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T2W9%2BJHv%2FJrdVRv9QI%2B2O1WJSZ9QpcxNYAhWil5mUvNejTa4LA3Epl%2FwJcoGZwGq%2BWvYuDLPamtcrh62wE2OyI6GaRCXFqn3d2hV%2F3LlearDX5q7A%2B17ge9PPJFyXSTQulny\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1317\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb37d820883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"949e24fd95c8f12dc8996b45338c7a59","sha1":"e4d5f0a94cf120dbaac07112b1c579c1c4462543","sha256":"15c7da671fc342bea5aa9d4f57cc14d51480230ef91bf2dc15177736612b89f3","sha512":"a9e96fee2a935573ef8df15634afe3351b49885ea5d9513c9ffa40f0e996c527d71d383280bd266add13efdde6b17f1de2a2d6a9b6d8a91135a138c478a76f02","ssdeep":"","tlshash":"5221b6fb2e157875fb658e37d60b5bf7723780a229e49504e78373260f0f616109a1c6","first_seen":"2025-12-15T20:51:39.388255Z","last_seen":"2026-04-21T03:40:01.825351Z","times_seen":29,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/no.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/no.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 971\r\nlast-modified: Thu, 12 Mar 2026 17:39:04 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa38-3cb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RmYmgUFXF0FKvrLzkvHwqMo4OXp7zKRwgD03hBJWZNIuA77%2FR15z06SU%2F7blmLZthLTa8f356V73aw4CtK10IBhMGgVCUR%2B%2F16zzjzvGcCApoCOxkGzn8NUeUPHxekitBgcv\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1317\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb38d970883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":971,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"3e74d7063cb14a8d18ae32719cc630e6","sha1":"dd24ac0027a5d8605e02dc05d43a83d40b49e0c7","sha256":"585d8c52fddb2481bbd388c65cd8799e03a84fffa76f3051d5d6ec7418992b81","sha512":"c51e3d49233c8ce2449a149b95c46038069eeb713e3132d653a9d9cbe63f89b2543b5c124c6037b15f05b7dc1e8a47f3abb652f906889df54db4f3bc24fb7efe","ssdeep":"","tlshash":"8611c8840203c9e8c178d275446cda41f3851c7551f7c52e61a46e358f92ca9d688b52","first_seen":"2025-12-15T20:51:39.362257Z","last_seen":"2026-04-21T03:40:01.838044Z","times_seen":29,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/static/logo.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /static/logo.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 18441\r\nlast-modified: Thu, 12 Mar 2026 17:39:10 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa3e-4809\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWrvjwiAyqudFsGNxdczBWMuDoSHkjvyn3FtW%2BwHdl%2B0PvdvJfgWync3J7hW6klHvSIVsUzWRfRDbO%2F6Z07YAdeim8mlsqvgA0TCcrb9w3SV7XWkFNDBKrSFByokOa%2F8Nyof\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 717\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb36d700883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 150, 8-bit/color RGBA, non-interlaced","md5":"f9fd716d30e220aa24bab0e94ebf0aa0","sha1":"4af32d78655436173f272bb65159a232f1671b8d","sha256":"5e937c4d8fd33714e43b400f238cf37630e6eaeefa105cca9d77760223a16e94","sha512":"3c5711926307d16cdccc175e5327efa1fa3ec759b205d71778949de131b7cba8a86dacbc2aaf6548a6b825bd5e3cf64d96f80d0b7f279c59ac703487c70332c4","ssdeep":"384:+34AiIJUulRNZqwfc0AbjAOQkWHE+kGO1wvl:TAVN46c0cjaJGI","tlshash":"5782d14a1f7fd10ebf047ba750ddbad743131a2087bfc346496a068e5bf6db2a080650","first_seen":"2025-10-15T23:49:05.850108Z","last_seen":"2026-04-21T03:40:01.819056Z","times_seen":15,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/us.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/us.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 656\r\nlast-modified: Thu, 12 Mar 2026 17:39:06 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa3a-290\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fJB9kyvVjP8XO%2F6h1BLBYGK4z3u7n5nG3DOY3gCABINLXnkGPS20R7%2BXlcQiaaDB%2FwaiPBoCOCOzMJZs2yIR8eS3dHRzui5X5rdMb35AKrfKSQPLllkPUWBp6Bv0yIMekRUH\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 5026\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb36d710883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"ae506a6c014bfeb8d8cbfdfbe94c14c9","sha1":"f4e74440c4e79e71959b9b8f799f2e8a7e15b7ee","sha256":"bc6dd978e70894c8a0148e6806f4fde9566ee59349adb03c02a61a3b2e25b6f1","sha512":"9f0119afef901697cf8410e94c65e43fe11a7e5f7f469b024645b2ed8689bdbae3c13b98ed36deda850de9198a90b5e5e0ec849c2132718544a3afe1e463b03e","ssdeep":"","tlshash":"baf023e7c8d0e43b9ef6d2924d139af58872077402634801dd79f47dac85754839cde0","first_seen":"2023-04-10T16:41:39Z","last_seen":"2026-04-21T09:58:54.139237Z","times_seen":911,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T03:38:50.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cAGbm66K5E5pNwZkpe8eXrIfOj67sHqN8JrH1IbCXQTdbphYU8olCnbQz%2Bwl2489AVTwxHQN%2FWnUPVQI%2BMvKJEDihgnNYdDeEYC2iG2wbAen5rJUHWkJglgwSupX3A3JaSOR\"}]}\r\nvary: Origin, Cookie,Accept-Encoding\r\nx-ratelimit-limit: 288\r\nx-ratelimit-remaining: 287\r\nx-ratelimit-reset: 60\r\nset-cookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; max-age=14400; path=/; HttpOnly; secure; SameSite=Lax\n__Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc; path=/; HttpOnly; secure; SameSite=Lax\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self' https://anonfilesnew.com https://*.baycdn.net https://*.freestorage-01.bond https://*.freestorage-02.bond https://*.freestorage-03.bond https://static.cloudflareinsights.com; media-src 'self' https://anonfilesnew.com https://*.baycdn.net https://*.freestorage-01.bond https://*.freestorage-02.bond https://*.freestorage-03.bond https://static.cloudflareinsights.com blob: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://anonfilesnew.com https://*.baycdn.net https://*.freestorage-01.bond https://*.freestorage-02.bond https://*.freestorage-03.bond https://static.cloudflareinsights.com https://doubtfulimpatient.com; worker-src 'self' blob: https://anonfilesnew.com https://*.baycdn.net https://*.freestorage-01.bond https://*.freestorage-02.bond https://*.freestorage-03.bond https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' https: data:; font-src 'self' data:; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://anonfilesnew.com https://*.baycdn.net https://*.freestorage-01.bond https://*.freestorage-02.bond https://*.freestorage-03.bond https://static.cloudflareinsights.com; base-uri 'self';\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ef95bb1ac597130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8911,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4227)","md5":"8ec4e97636a522bb5da11d1ba19c2018","sha1":"b0b0f5723bbdc3f5ee34e7dce774f5da0f1a5682","sha256":"86ed0752d5fa6c02c71fd0f489d329ed069eca9c8c005ae7efab61f440b5737f","sha512":"8fa72996198f012b52a19d8d44af11531eea2d81c4adc33a173eed8471924b74431191fcccf19748ac0561263385990ae5f7e6a7ae63ad3dae73866ab1219f59","ssdeep":"192:6XK4kdCRZfS0uYY8JIbcUdm/sGkyr9YSVh7ZNREDy:EK5a2YY8JIbcz/sGkyr9YSVh7ZD","tlshash":"8e02deb74349155f8712d9d46c71351ce083112ecfa2cc52b289995baf82f92ccf68ee","first_seen":"2026-04-21T03:39:16.927263Z","last_seen":"2026-04-21T03:39:16.927263Z","times_seen":1,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":60,"dns":43,"connect":1,"send":0,"wait":109,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonfilesnew.com/img/flags/24/ph.png","fqdn":"anonfilesnew.com","domain":"anonfilesnew.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonfilesnew.com/","date":"2026-04-21T03:38:50.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonfilesnew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 03:13:05 GMT","end":"Fri, 17 Jul 2026 04:09:42 GMT"},"fingerprint":{"sha1":"5A:C7:1F:03:79:20:23:F2:49:06:D4:26:D4:F0:3B:28:69:D4:46:36","sha256":"6D:E7:5D:8E:D3:3E:BC:7B:A4:97:83:8B:4F:B4:9E:6D:9B:41:B9:74:32:A4:62:E5:15:FE:FB:C9:80:2C:89:ED"}}},"request":{"raw":"GET /img/flags/24/ph.png HTTP/1.1\r\nHost: anonfilesnew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonfilesnew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-session_=MOTjvk8iuwHRV3tK5BgpynPblfWS6w-k4NFcnnxw7vY; __Host-csrf_=9vmwL3NPIu0BTI3gTIUkXy1SITCGbVFYXgp3kCbNAwc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 03:38:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 1498\r\nlast-modified: Thu, 12 Mar 2026 17:39:04 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2fa38-5da\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IOJRQOAA%2FbKPLk5qWYKPxOT97shl3Q8wOfQ8Y%2BDHk4VgMB1nlLu9V4J4wmNl147tRHN0WJf7tLDlKAXg9q%2BGJBLYeaH7hwOfJL1zsHeRN3FjA%2BHtXEVdGWqzEII12vus0qzq\"}]}\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nreferrer-policy: unsafe-url\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 6441\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ef95bb37d8c0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1498,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"d1c54ab1b30309d604526bf40516272e","sha1":"05794c667db137b7486cbf48ca339c9673e9719b","sha256":"99dcedd4428de3ecaa583e65485c4e0b228c759ddd784d92926bfc4eee8fee70","sha512":"948d8ab889ddb51c05691b3e2bcd0a6439ba6dc92d87067b9d8a957680ee54976b03980d7f41d25d8b8a41380470d0f2182bfd9a67a6ea490a10fd951c00a482","ssdeep":"","tlshash":"ae31c7df7209aeb0c1658130cd13eb6b803ee5e4d0196e12c1864a631de1d153db692c","first_seen":"2025-12-15T20:51:39.410463Z","last_seen":"2026-04-21T03:40:01.831663Z","times_seen":29,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"anonfilesnew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}