{"report_id":"be4e00e7-f53b-4115-97ed-bd017970513a","version":6,"status":"done","tags":[],"date":"2025-07-26T22:44:55Z","url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"172.67.137.227","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"title":"DeBank | Your go-to portfolio tracker for Ethereum and EVM"},"submit":{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"172.67.137.227","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-08-30T22:44:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":6,"urlquery":0,"analyzer":22}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-26T22:44:33Z","timestamp":1753569873,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.15","port":43246,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-07-26T22:44:33.410928+0000\",\"flow_id\":1340445775966415,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":43246,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-07-26T22:44:33.405711+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-26T22:44:33Z","timestamp":1753569873,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.15","port":43230,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-07-26T22:44:33.417870+0000\",\"flow_id\":324340265594927,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":43230,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3439,\"start\":\"2025-07-26T22:44:33.405551+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-26T22:44:33Z","timestamp":1753569873,"ip_dst":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.15","port":40812,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)","source":"{\"timestamp\":\"2025-07-26T22:44:33.425606+0000\",\"flow_id\":1602711511445213,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":40812,\"dest_ip\":\"172.67.70.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058813,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.meowrpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3442,\"start\":\"2025-07-26T22:44:33.405213+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-26T22:44:33Z","timestamp":1753569873,"ip_dst":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.15","port":40810,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)","source":"{\"timestamp\":\"2025-07-26T22:44:33.432519+0000\",\"flow_id\":630629415857597,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":40810,\"dest_ip\":\"172.67.70.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058813,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.meowrpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3443,\"start\":\"2025-07-26T22:44:33.404925+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-26T22:44:33Z","timestamp":1753569873,"ip_dst":{"addr":"52.17.238.36","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.15","port":36928,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed1 .bnbchain .org)","source":"{\"timestamp\":\"2025-07-26T22:44:33.479738+0000\",\"flow_id\":1471676354212533,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":36928,\"dest_ip\":\"52.17.238.36\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058795,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed1 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed1.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":928,\"bytes_toclient\":3168,\"start\":\"2025-07-26T22:44:33.406197+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-26T22:44:33Z","timestamp":1753569873,"ip_dst":{"addr":"52.17.238.36","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.15","port":36920,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed1 .bnbchain .org)","source":"{\"timestamp\":\"2025-07-26T22:44:33.483641+0000\",\"flow_id\":675733014917558,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":36920,\"dest_ip\":\"52.17.238.36\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058795,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed1 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed1.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":928,\"bytes_toclient\":3168,\"start\":\"2025-07-26T22:44:33.405942+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"bsc.meowrpc.com","ip":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-04","domain_rank":0,"first_seen":"2023-07-10T08:36:27Z","last_seen":"2025-07-24T14:07:04.03555Z","alert_count":0,"request_count":1,"received_data":975,"sent_data":547,"comment":"","tags":null,"fingerprints":null},{"fqdn":"demnbfgkdffijregegn.shop","ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":22,"request_count":22,"received_data":18518923,"sent_data":10273,"comment":"","tags":null,"fingerprints":null},{"fqdn":"assets.debank.com","ip":{"addr":"54.240.174.73","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-02-21","domain_rank":547095,"first_seen":"2022-01-27T12:36:13Z","last_seen":"2025-07-12T21:26:32.206459Z","alert_count":0,"request_count":1,"received_data":24232,"sent_data":561,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-07-23T15:19:49.824156Z","alert_count":0,"request_count":2,"received_data":798853,"sent_data":936,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bsc-dataseed1.bnbchain.org","ip":{"addr":"52.17.238.36","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":0,"first_seen":"2023-08-09T23:52:32Z","last_seen":"2025-07-24T14:07:00.764026Z","alert_count":0,"request_count":2,"received_data":7443,"sent_data":1083,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-07-23T15:14:05.350656Z","alert_count":0,"request_count":2,"received_data":5833,"sent_data":955,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.ipify.org","ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":3267,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-07-23T23:13:52.866577Z","alert_count":0,"request_count":2,"received_data":935,"sent_data":916,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-26T22:44:33Z","timestamp":1753569873,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.15","port":43246,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-07-26T22:44:33.410928+0000\",\"flow_id\":1340445775966415,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":43246,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-07-26T22:44:33.405711+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-26T22:44:33Z","timestamp":1753569873,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.15","port":43230,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-07-26T22:44:33.417870+0000\",\"flow_id\":324340265594927,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":43230,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3439,\"start\":\"2025-07-26T22:44:33.405551+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-26T22:44:33Z","timestamp":1753569873,"ip_dst":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.15","port":40812,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)","source":"{\"timestamp\":\"2025-07-26T22:44:33.425606+0000\",\"flow_id\":1602711511445213,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":40812,\"dest_ip\":\"172.67.70.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058813,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.meowrpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3442,\"start\":\"2025-07-26T22:44:33.405213+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-26T22:44:33Z","timestamp":1753569873,"ip_dst":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.15","port":40810,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)","source":"{\"timestamp\":\"2025-07-26T22:44:33.432519+0000\",\"flow_id\":630629415857597,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":40810,\"dest_ip\":\"172.67.70.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058813,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.meowrpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3443,\"start\":\"2025-07-26T22:44:33.404925+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-26T22:44:33Z","timestamp":1753569873,"ip_dst":{"addr":"52.17.238.36","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.15","port":36928,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed1 .bnbchain .org)","source":"{\"timestamp\":\"2025-07-26T22:44:33.479738+0000\",\"flow_id\":1471676354212533,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":36928,\"dest_ip\":\"52.17.238.36\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058795,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed1 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed1.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":928,\"bytes_toclient\":3168,\"start\":\"2025-07-26T22:44:33.406197+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-26T22:44:33Z","timestamp":1753569873,"ip_dst":{"addr":"52.17.238.36","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.15","port":36920,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed1 .bnbchain .org)","source":"{\"timestamp\":\"2025-07-26T22:44:33.483641+0000\",\"flow_id\":675733014917558,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":36920,\"dest_ip\":\"52.17.238.36\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058795,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed1 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed1.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":928,\"bytes_toclient\":3168,\"start\":\"2025-07-26T22:44:33.405942+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/firmware.407c35de.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e41a554247ea3860c49bbad5d4a1eec6","sha1":"d0269d5c695d7f8625e8079876723c3f2e6dabf9","sha256":"665bf48044096d0c99178227b34f7a1d78c247f839f541f9cfae94ce665bec4b","sha512":"ee6b2d8303618d01982e6d1dd90c8c1400624737644ebce8e0b5adadd140e56a3f32693d5ba0658f525300d77f6d17388778d0e97e6424813a9777136d318f33","ssdeep":"1536:sv1RN26QB4IVE5I8ao0RRWi8K6IV1Tdp1ELc5kyJQ4:sNT4Uao0ayvTdp1VW4","tlshash":"8ed318e83992f6516ab701a710ef1817733d6a1b280c49a0a215fd8e74f845fb17becd","size":137123,"data":"","first_seen":"2025-06-30T04:35:35.88017Z","last_seen":"2026-03-27T19:24:36.96451Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-20T04:26:09.898222Z","times_seen":746226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/892.4f05d6b3.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"edbe776fc857d9c80e0882b23c648aa7","sha1":"8020a7d57bbe359482751bd369291ad0e1733080","sha256":"cd756ede1bc88138e942c293a4d38bcf36bc90e450f6e692633c7bfa648b8001","sha512":"983955921b73e24921d6c680f792a01925bbe7c2d0b4c5d3f252d1e523a90cb31c5a53fb40d44a04b385b460bbd7d1268796d015104ed896759c6dbe640434c7","ssdeep":"384:aT+k0nlqiU3M+VlFXbnPzKwWlk1GZ0mzMFB3dHwIszDGgZBO9xP7wBQ1au5hwhr1:aTAlMM+zFLzK7kOM1tsDE1r1au5UrkA","tlshash":"3303e65d724374b20ddb60f1a53f560ba2375029bc478a4cb52aead34d3adb9707ae30","size":39071,"data":"","first_seen":"2025-06-30T04:35:35.894891Z","last_seen":"2026-03-27T19:24:36.948294Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-20T02:24:58.557917Z","times_seen":31943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-20T04:26:09.897618Z","times_seen":238105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/main.ba25ed66.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7a1b8dc7ffa338895124a353af6c69e","sha1":"47e7d670e08d186669e7191a0118ea4248c911e8","sha256":"d6d6e18ca41cc569ea57774e5b4c3c0ca3bb631b937771f848284d30b034e2ce","sha512":"c1d954d76fec4b1fda020e1f9d0c7bb83ccbf7505ef0e962d9ef7aad30023ba219382f994e83e809f438d1be8dde92d7be7a95f0afe58bdec27281ac11ae576a","ssdeep":"384:SF9QHYAS98WmIjVkjtemakMkf92crVP0hxIe3KUXnRoP7uXpHcTD:SjQHYAS98WmIjOfvMs9v9cIeTnaPqXpU","tlshash":"96526bd933d9f0f9d5b10494e47ea1a2f329551a3608d4a0f38bec253889d919273ff6","size":13980,"data":"","first_seen":"2025-07-26T22:45:03.916756Z","last_seen":"2025-07-26T22:45:03.916756Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"495a10242d90ae6c8e08a5e5ae7f19f3","sha1":"7866a91e8736398df8f8f14bfb5c8ef06804bb75","sha256":"b3b24d4259d50bdacba65e8f05d8a4ac7e1919575c212c0e01aedc5e7170401a","sha512":"6289d83ed0ca8c08ead7f7b46c43120891bb3c3f940eac23c6b4e89228152e13db5e07c9d8bb4f17590c1d38a08206f56de680d2b31be2c3d2d431961ace766c","ssdeep":"","tlshash":"2a119ec078b4d042122e26fac12b74057c92dcbf83ac6090d56ddefc19b119c26d69ba","size":1000,"data":"","first_seen":"2025-04-07T11:34:31.004438Z","last_seen":"2026-06-01T09:40:57.107347Z","times_seen":1069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/8963.e8c8af49.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"06cc47e59d0104bed1c1c5473d46f96f","sha1":"c65010a2f1232863240e1a33440e12e5aaabe966","sha256":"b13f331abb68a16ff4dec166678048a6fade84884b590b67f25e526f098cb936","sha512":"fd21c04d581050ba05f65b4d078ec5049bedf88f188db07a37f9fc5778b17b4180bf37b3ac1d358ffa0a0fe4bcf4302145640e2012f818f203643380d8ebfbbe","ssdeep":"","tlshash":"e41132a0b04578ce0ac5058c89369a0a524589a8b11890493e28baf7ac63a5e29e7f26","size":1000,"data":"","first_seen":"2025-07-26T22:45:03.944754Z","last_seen":"2025-07-26T22:45:03.944754Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/8531.ebd38802.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2044e9bf7f9cb9674c4a958a5e6c4083","sha1":"a99601c824323bfcaca76ec47ec2174b00ae9841","sha256":"4c9da9c7ae7ffa63b12e9c3e84eb525e21abf1afe14ea55d7e0f2147763bf731","sha512":"7fd09e48917316c2fb52678262d830e57df081bdc80eebd775a540a8a803e996e718c5f5bbcaa38d27246f738fb9d6c4fa83037d0efd8b91c3ddecf60a6a8b40","ssdeep":"","tlshash":"2211a8d978d0a8e767130cd388fa0a07d4398e20304c85b9f5119d8a3aa1f7c06abf2d","size":1000,"data":"","first_seen":"2025-07-26T22:45:03.949759Z","last_seen":"2025-07-26T22:45:03.949759Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/4791.e504d674.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dc9eee867740a3c7e46ff5a941c8881","sha1":"54f4637407eef7cd5bbb9cd1f9128f7fab8d9eca","sha256":"224bfcc9176b3685981d410cef6bd58d13f4daf927a9a2576bdc1898595bd7ad","sha512":"38a502ab256257ce19c4dd4852690c2de89a8ec6974e8827c0eb425935f1afaf1a2beff0144b64296f2a81b8b1405120d3f547060a65451820ad3792892ef821","ssdeep":"6144:sO9bqLI8uxDzvfnsan63aoL5lHBAh3QJgPToLZDaU:sO9bqqRzvfnUbHBA+tB","tlshash":"0ef4d858b614a1bc9dba57e889371021b65d91ff70e04361e35eccf076a24dce2bac8d","size":750545,"data":"","first_seen":"2025-07-26T22:45:03.888553Z","last_seen":"2025-07-26T22:45:03.888553Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/58c3ca4e-c042-4abb-b188-d7be14f62db1.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b17be239be764b99a9c8d52cc2e7811","sha1":"39dfdeb32927bcb8e221dc159861ab4175b9aa84","sha256":"5e90ecbbf146e5d27daed22e1ad29e2c9f3ac736e7bd7ace2eacb27e9a06d6c7","sha512":"8669790f8e94dcc73e3b6e0e45238bec905f4fbd911c93e5283a395f7aafb45c25ea4197db3d957e1ca7650148f642a516bee830a382604c505070f360d2ccf4","ssdeep":"24576:qsd2Qs6llvKZWErPYKyNsmMPgvfaiw8ToNh/UdQdIFdt:qsd2QVbvt1gJW","tlshash":"ba367644d841dca14bed0bfb53718084820867fa5ec82ed7ba9fecf7f74da1a1462a15","size":5117681,"data":"","first_seen":"2025-07-26T22:45:03.953067Z","last_seen":"2025-07-26T22:45:03.953067Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/972.39a7060a.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c5fcf0b8f58b6e87dcf051f6142282e","sha1":"2dab34e96c80ef15599488600b9e77fcb9029eb7","sha256":"dad3173d256dba234c3e0499c1fe7213937de5b8b489c6cb4ae1d68067da008d","sha512":"776c38153739c238ea9f7c93ffcecbafa7ceeb88a26e0cfdb3ddab24b35b7e7b9468ea7ed0ef0a397d26723aed926925361f3e8b82ee38a25b3a445f84bf8f49","ssdeep":"1536:G/kikd1TTp7Q1lds2/xpRhTnkJwsLv+guWSrmo:Pi6T85pR9qSC4","tlshash":"1e734fc83ad3f016576374a1007f048bf23e6fa9689ca504e1a1f0ed78b895ee577e58","size":77751,"data":"","first_seen":"2025-06-30T04:35:35.885446Z","last_seen":"2026-03-27T19:24:36.961578Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/7564.6b6760e9.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e75e6d23296742c2db4a169408b6c56d","sha1":"19489aa4525a35cf2aef2afd1c70a4835f80a1ea","sha256":"068d0d186aef83acf475eb492b2e40585fa5c84324af1358575f24f2d525b0f8","sha512":"a08350edac365b14cc81b42a3e8a2167d43fcf3fbcc4c2df7c060902198801b9aa94e79a374e3ef706cae9d992a42c99636b96ca50d7ad9ba36a1b77d88728ad","ssdeep":"96:JTK5ey95F1YqZDZlZ9sDlZCyZDRO5ZsgJPVKWGigyvgjV:JTKgwY02gJPVuiQ","tlshash":"678186fd7a52b0201b72e2b3035fb50735398b626d084835a95aebd43d640af6357f1e","size":4104,"data":"","first_seen":"2025-06-30T04:35:35.901497Z","last_seen":"2026-03-27T19:24:36.994378Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/196.e32765d0.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ed1c415d2fc13532dca350f26c0ffd0","sha1":"2d7c5e3c952e1dedce780a109abffd507e4f9d38","sha256":"d74e0c1f349dfc1f0a39771bdae849ba04de1cb637d8dabc8effb0eab0042b0c","sha512":"6644bde7ab11f968e6cb1cdd4f4e6402e191aa58f8cbeacf239b1023394e57395d429b345af649da3d57a9293e625934d344a340cb8c9b99d6b3d3e1f19afdb0","ssdeep":"24576:l3rRJwQ/58OfAoVuo6AkvfAyjqwx/pJCPFLhGZVla5oBjGxXUKKdrZlj8VF8mz:lB3kqwx/7jGxXUK8ZlQ","tlshash":"00956c98f160a1bc59ea56e4c93b140db26e555de044c730ee3ecce2f6a01cce267f69","size":1958898,"data":"","first_seen":"2025-07-26T22:45:03.956126Z","last_seen":"2025-07-26T22:45:03.956126Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/8043.875c34c9.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c63c707e422e66927bdeef75bf731fbc","sha1":"7e9c190a7f0a9097c84ca339fa6fba8bc0101bad","sha256":"2be9ea1f3d728d0efd1b704c490edab85577ccae91850f1264605a93cc1b4485","sha512":"7425a99966b5df8f902466076a745c870cfd8935efb08a36550f9f8249c6f7ea2c35671187e64c3f0eafa5ea8d326de7e1fcb14baecb48eec3ef5ddf3f27f093","ssdeep":"1536:qcIab6G9B++DKF13z+ebyBPQ+hvcaMVzCJOOc4U1qrPi4XQIVOXBNm4iR/6ADB8A:qR5/pvq9LE0n+a","tlshash":"7a9375b79392ef5f9f1800a140bf2b85cd4f8974d6ad7ca85fc8d9b16150063ab93223","size":91041,"data":"","first_seen":"2025-07-26T22:45:03.909427Z","last_seen":"2026-03-27T19:24:36.967914Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/6535.b6d5c17d.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e660f999316dcaf79e2670c102b98849","sha1":"36fb7aea4b307c30d65c048884413ba977b117d0","sha256":"06f974126bb382aa9499df95489fcb9ae010f83c02f7548051c440e8ecd92ec4","sha512":"0b026b1bc1d1e4b0726a75ca0fc323388fd2fa2f1c627b28f123c9191b3536390149e768774c2ce3603e60f2770b1c72328e1467e6e2f4d8849bc87415c01e92","ssdeep":"","tlshash":"ff7193947892f6741fda1dca84be4121fb2a584e341ac4a0e4ae4e1f35471ce693e93a","size":3819,"data":"","first_seen":"2025-06-30T04:35:35.87695Z","last_seen":"2025-07-26T22:45:03.936001Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/5256.e54b3fe7.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e4faabe342237a9212e0895ca1957f6","sha1":"1e0594cf86039b21eb890280218a95048f69e730","sha256":"bc479f5ff7abb1b692fb81fada1c2cfedc5fcdc28f49b054ee54425eb844e6e5","sha512":"ac24cc8d04322b27ff1ed2a7bf372d591d5fe1d34d689a2af7b2b21456ce505c6013a27b166337d5451d55ea8b588b92405e5c16fd3f01f412a25fd23dbe59b9","ssdeep":"768:OTexdlWoIuAUNZzCW+8jRxL4fY43R0i5wM8x6YmtYCzqyo:X3lGuDZaQ4VspTAo","tlshash":"d163c488b691f0b196e221e4402f010bf23e5e7a646da4d0e295d9f16cf8d8fc636f1d","size":68156,"data":"","first_seen":"2025-07-26T22:45:03.92682Z","last_seen":"2025-07-26T22:45:03.92682Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/4767.c6a0511e.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dcccf1128d539300bd7c7c6486bb9544","sha1":"ffc0b44c1122655b1dff73547bb85283451d25ec","sha256":"543ccbe4636e2a19d73c9fd26e60bb2ded757a33789d1edca8c0de6abf3ea781","sha512":"f098aa6d6528595effea8019246fe7089207b90f784d067b6f37c3fd3d992bedd5923bfa572a71228a50ad428a34f63277fcd4bf574bb56c4c61b9e63b92179c","ssdeep":"12288:29qnVfknAoVuo0Nax0vZHkSnvJk40OGjCwTnHBahd4d:29qBknAoVuo0G091XGjp/d","tlshash":"eae4f748e7d42c7e43fb42850c3f090af1ab1855540b68aaf7fad192397457af1a7a3c","size":706628,"data":"","first_seen":"2025-06-30T04:35:35.8925Z","last_seen":"2026-01-16T11:02:01.571573Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/4791.e504d674.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:31.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /static/js/4791.e504d674.chunk.js HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:31 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=b4ZQHFJLwMgE6ze5EDAGxufDDS37lxcw%2BEgK8gUL9tCZUH8%2F7yl22X9sfIH%2FD8umnKBBUceOdrrokaexHUrohK%2Be5InqSXL1LkUksXQbKN8krmrP7VMPrgcFh7k9opXjFh83laXRZZruvo4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 22 Jul 2025 22:07:40 GMT\r\netag: W/\"68800bac-b73d1\"\r\nexpires: Sat, 02 Aug 2025 22:44:31 GMT\r\ncache-control: public, max-age=604800, no-transform\r\ncf-cache-status: MISS\r\ncf-ray: 96576c0fbcd2b51e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6882\u0026min_rtt=647\u0026rtt_var=6967\u0026sent=85\u0026recv=111\u0026lost=0\u0026retrans=0\u0026sent_bytes=8698\u0026recv_bytes=9830\u0026delivery_rate=312608\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18104\u0026unsent_bytes=0\u0026cid=539cb4b9206a2a9f\u0026ts=928\u0026inflight_dur=61\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":750545,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65459)","md5":"0dc9eee867740a3c7e46ff5a941c8881","sha1":"54f4637407eef7cd5bbb9cd1f9128f7fab8d9eca","sha256":"224bfcc9176b3685981d410cef6bd58d13f4daf927a9a2576bdc1898595bd7ad","sha512":"38a502ab256257ce19c4dd4852690c2de89a8ec6974e8827c0eb425935f1afaf1a2beff0144b64296f2a81b8b1405120d3f547060a65451820ad3792892ef821","ssdeep":"6144:sO9bqLI8uxDzvfnsan63aoL5lHBAh3QJgPToLZDaU:sO9bqqRzvfnUbHBA+tB","tlshash":"0ef4d858b614a1bc9dba57e889371021b65d91ff70e04361e35eccf076a24dce2bac8d","first_seen":"2025-07-26T22:45:03.888553Z","last_seen":"2025-07-26T22:45:03.888553Z","times_seen":1,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.debank.com/static/media/S6uyw4BMUTPHjx4wXg.65e877e5.woff2","fqdn":"assets.debank.com","domain":"debank.com","tld":"com"},"ip":{"addr":"54.240.174.73","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:32.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.debank.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sat, 08 Mar 2025 00:00:00 GMT","end":"Tue, 07 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A0:8B:5A:47:44:5F:C8:AB:84:2B:FF:D9:FF:61:73:86:DC:A1:AA:35","sha256":"98:DF:DD:71:46:A1:59:4E:8C:38:6C:BE:57:61:69:41:1F:F9:D8:26:51:6C:F4:00:AF:27:2F:FC:76:F4:10:9C"}}},"request":{"raw":"GET /static/media/S6uyw4BMUTPHjx4wXg.65e877e5.woff2 HTTP/1.1\r\nHost: assets.debank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://demnbfgkdffijregegn.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 23484\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 3000\r\nlast-modified: Thu, 24 Jul 2025 07:16:58 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 26 Jul 2025 22:44:33 GMT\r\netag: \"b4d2c4c39853ee244272c04999b230ba\"\r\nvary: Origin\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: h68cC8LZnPKzcAofOs6AOTz_-eYn9CwOTwwu0sVAIu77scsdFQeGuA==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23484,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23484, version 1.0","md5":"b4d2c4c39853ee244272c04999b230ba","sha1":"c82e22dde9716c40ba20e6c7ed03a1b66556de15","sha256":"c3c0d3f472358aac78455515c4800771426770c22698e2486d39fdb5505634e1","sha512":"d315d6a4e28bb125128d3a4d99fe120e383061d367341f06c4b74a589b4ca29c516cbc8d23ddd37267a1e4497c74fd58b1dffd39cb70348b8a3ea3d48237f8ef","ssdeep":"384:iXFbv7T+soFz7IbR/aBa639y2FNedPuzHQ1eGcYe3mkGtapwx/vX5htghzvcjvm:iXFzP+soFP8RQty2FNedmzocYe3DqapT","tlshash":"40b2e1778269aa70d6d01bb5ffc112a73a79589245d5e3a34e409b02442c73f7eadf40","first_seen":"2023-04-07T01:34:48Z","last_seen":"2026-08-19T23:37:02.181058Z","times_seen":4005,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":32,"dns":35,"connect":1,"send":0,"wait":290,"receive":23,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:32.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":12834,"data":"{\"messages\":[{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"page_reflector\",\"transactionAction\":\"FINISH\",\"transactionDuration\":313,\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2768,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama page_reflector FINISH\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"appWillLoadPage_pageMountUnmountSubscriber\",\"transactionAction\":\"FINISH\",\"transactionDuration\":310,\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2778,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama appWillLoadPage_pageMountUnmountSubscriber FINISH\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"appWillLoadPage_pageTransitionsHandler\",\"transactionAction\":\"FINISH\",\"transactionDuration\":310,\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2778,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama appWillLoadPage_pageTransitionsHandler FINISH\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"pageWillMount_pageWillMountPropsExtender\",\"transactionAction\":\"START\",\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2787,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama pageWillMount_pageWillMountPropsExtender START\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"pageWillMount_pageWillMountPropsExtender\",\"transactionAction\":\"FINISH\",\"transactionDuration\":1,\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2788,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama pageWillMount_pageWillMountPropsExtender FINISH\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"pageWillMount_componentWillMount\",\"transactionAction\":\"START\",\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2788,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama pageWillMount_componentWillMount START\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"pageWillMount_componentWillMount\",\"transactionAction\":\"FINISH\",\"transactionDuration\":2,\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2790,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama pageWillMount_componentWillMount FINISH\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"pageWillMount_triggersAndReactions\",\"transactionAction\":\"START\",\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2792,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama pageWillMount_triggersAndReactions START\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"pageWillMount_triggersAndReactions\",\"transactionAction\":\"FINISH\",\"transactionDuration\":1,\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2793,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama pageWillMount_triggersAndReactions FINISH\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"pageWillMount_PageReflector\",\"transactionAction\":\"START\",\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2793,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama pageWillMount_PageReflector START\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"pageWillMount_pageWillMountPropsExtender\",\"transactionAction\":\"START\",\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2794,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama pageWillMount_pageWillMountPropsExtender START\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"pageWillMount_pageWillMountPropsExtender\",\"transactionAction\":\"FINISH\",\"transactionDuration\":8,\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2802,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama pageWillMount_pageWillMountPropsExtender FINISH\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"pageWillMount_componentWillMount\",\"transactionAction\":\"START\",\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2810,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama pageWillMount_componentWillMount START\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"pageWillMount_componentWillMount\",\"transactionAction\":\"FINISH\",\"transactionDuration\":3,\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2813,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama pageWillMount_componentWillMount FINISH\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"pageWillMount_seo-page\",\"transactionAction\":\"START\",\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2813,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama pageWillMount_seo-page START\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"pageWillMount_seo-page\",\"transactionAction\":\"FINISH\",\"transactionDuration\":1,\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2814,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama pageWillMount_seo-page FINISH\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"pageWillMount_triggersAndReactions\",\"transactionAction\":\"START\",\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2816,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama pageWillMount_triggersAndReactions START\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"pageWillMount_triggersAndReactions\",\"transactionAction\":\"FINISH\",\"transactionDuration\":0,\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2816,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama pageWillMount_triggersAndReactions FINISH\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"pageWillMount_PageReflector\",\"transactionAction\":\"START\",\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2818,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama pageWillMount_PageReflector START\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false},{\"platform\":\"viewer\",\"msid\":\"52e97da0-e8d9-4737-82e3-bb47396d07d2\",\"fullArtifactId\":\"com.wixpress.html-client.wix-thunderbolt\",\"componentId\":\"thunderbolt\",\"transactionName\":\"pageWillMount_PageReflector\",\"transactionAction\":\"FINISH\",\"transactionDuration\":164,\"sessionId\":\"bbb90f35-b91d-4f0e-b83a-0f3aa3674299\",\"sessionTime\":2982,\"logLevel\":\"INFO\",\"requestId\":\"\",\"message\":\"Panorama pageWillMount_PageReflector FINISH\",\"data\":{\"presetType\":\"BOLT\",\"customParams\":{}},\"httpReferrer\":\"https://www.lacasacy.com/\",\"dataCenter\":\"ireland-pub\",\"isCached\":true,\"isRollout\":false,\"isDacRollout\":false,\"isSavRollout\":false,\"isHeadless\":false,\"isSsr\":false}]}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 96576c188be7569a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 369708\r\nexpires: Thu, 16 Jul 2026 22:44:32 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jg%2Bgu34y3tAk0fng8c4QG1tobqMeUYwHswzJHebY1m%2FBPv5tXYVNxg1p6FcEHEqpzkESFhfC7zYWDrcMXYjABXsPZ0pJtcWw8U7gr5hje6CQBNFFzuTAellyN1iB5gQW9h49s0be\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-18T19:16:43.115819Z","times_seen":8493,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":20,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-07-26T22:44:30.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:30 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 22 Jul 2025 23:16:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q78jwyWVxLHNusxUKZNTq9ixvyvAI91VmQFpJD8rGEtuNWqLf6Lyd66Ov3BqFIHBcM4wfs8Fyr7oT4nsna1NNRXvJau%2FFrrhwzbMYNJ3vIOtwem2OKQ%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96576c093e3f568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3184,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"147e8c37bff19c6371a25a371d0eca77","sha1":"7e6a23d3ed97a439cc21236cc6b67f155049e537","sha256":"80e2011ea03d69615308d8902c1b3dbe9b69d9a12bfe3f399746e7b1df3664c3","sha512":"c87b5d00cfc9b3fecb6627aeda7d73ffef851058c1a8a99c41d85addee6291bca4e828e33aec14b9ee1c4f71cb137c95b313db17bc6e7e4586b187d6fd378363","ssdeep":"","tlshash":"48611e7356b0cc4512248365a8e1f058dd08a097d358b89eb2dc62aa5fd2fe0c3f76a1","first_seen":"2025-07-26T22:45:03.895483Z","last_seen":"2025-07-26T22:45:03.895483Z","times_seen":1,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":85,"dns":60,"connect":1,"send":0,"wait":369,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/css/610.898ae56c.chunk.css","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:31.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /static/css/610.898ae56c.chunk.css HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:31 GMT\r\ncontent-type: text/css\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yn14kM%2BJOLBrIR8%2BGryM1fdQvP36YPPFLFHM%2F0N3PCxoSsUWmKPQbWQ4G2j6Qnr35iPLOoFQ65KoWcbElO3X3b6sHygYiSIN5NrLXXICbsWB2yLnI8KK1waB0BjqtqP7AZ%2F%2F7WSC%2BMJACKM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 22 Jul 2025 22:59:00 GMT\r\netag: W/\"688017b4-69cfa\"\r\nexpires: Sat, 02 Aug 2025 22:44:31 GMT\r\ncache-control: public, max-age=604800, no-transform\r\ncf-cache-status: MISS\r\ncf-ray: 96576c0fecdeb51e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1960\u0026min_rtt=0\u0026rtt_var=1450\u0026sent=2564\u0026recv=407\u0026lost=0\u0026retrans=0\u0026sent_bytes=3218713\u0026recv_bytes=25717\u0026delivery_rate=51339633\u0026ss_exit_cwnd=21660\u0026ss_exit_reason=2\u0026cwnd=36081\u0026unsent_bytes=0\u0026cid=539cb4b9206a2a9f\u0026ts=1278\u0026inflight_dur=395\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":433402,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"c81a55ede51fde5f43577eb40853c743","sha1":"bf88243f5d7af13051fd34928c1139cc5b921025","sha256":"6f1149e8d6f3bf86b65065a7c1da7bcabe7977a7552e729163a4e67be72eae10","sha512":"5f07f7c30712ce513db33d3b95dc6a57b5ecc155ccd29097ec31ec3a15e9ae0f3d23298d289cd1e60b664ea514e1041a1f34b81e31fd341ec64d915ab059ed5c","ssdeep":"6144:KARR6rpCDC6Lgk+1MInbtN2RriOCFRSJFtaSVbTZY:EKC6Lgk+1MInRN8riOCFRSJFtaWY","tlshash":"df941b26f255ae3af9b7a42fa6d1d54c3024ca03c9a3afa6f5a1d01dc1c76d3276170c","first_seen":"2025-07-26T22:45:03.898097Z","last_seen":"2025-07-26T22:45:03.898097Z","times_seen":1,"resource_available":false,"data":null}},"time_used":939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":909,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed1.bnbchain.org/","fqdn":"bsc-dataseed1.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.17.238.36","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:33.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed1.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nOrigin: https://demnbfgkdffijregegn.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 26 Jul 2025 22:44:33 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T04:30:40.665703Z","times_seen":17984494,"resource_available":true,"data":null}},"time_used":645,"timings":{"blocked":446,"dns":4,"connect":35,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/7564.6b6760e9.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:31.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /static/js/7564.6b6760e9.chunk.js HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":68,"data":"{\"oobCode\":\"LFkR4-qvKHMyCRmxFQR9kK5MLIG19nsGoE1KeHdKhmYAAAGYSOewgQ\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:32 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4104\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=oDZyHtTu54r8TQJkN%2B35f3CGO1wUTetY4uINln9HuDfie%2FAk3c5Rgv%2BADwszoyPj0jcVAd%2BjKoh2cj%2F4vBRL5SwYdPuKHCHb8oRLHfHpi%2F%2FMo7%2BsoCquqm17%2BFu79DBtEbd6K%2FiqOKoBYzA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 22 Jul 2025 22:07:38 GMT\r\netag: W/\"68800baa-1008\"\r\nexpires: Sat, 02 Aug 2025 22:44:32 GMT\r\ncache-control: public, max-age=604800, no-transform\r\ncf-cache-status: MISS\r\ncf-ray: 96576c0fecdcb51e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1002\u0026min_rtt=0\u0026rtt_var=439\u0026sent=4882\u0026recv=605\u0026lost=0\u0026retrans=0\u0026sent_bytes=6406392\u0026recv_bytes=37186\u0026delivery_rate=43683331\u0026ss_exit_cwnd=21660\u0026ss_exit_reason=2\u0026cwnd=41992\u0026unsent_bytes=0\u0026cid=539cb4b9206a2a9f\u0026ts=1467\u0026inflight_dur=581\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4104,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3979)","md5":"e75e6d23296742c2db4a169408b6c56d","sha1":"19489aa4525a35cf2aef2afd1c70a4835f80a1ea","sha256":"068d0d186aef83acf475eb492b2e40585fa5c84324af1358575f24f2d525b0f8","sha512":"a08350edac365b14cc81b42a3e8a2167d43fcf3fbcc4c2df7c060902198801b9aa94e79a374e3ef706cae9d992a42c99636b96ca50d7ad9ba36a1b77d88728ad","ssdeep":"96:JTK5ey95F1YqZDZlZ9sDlZCyZDRO5ZsgJPVKWGigyvgjV:JTKgwY02gJPVuiQ","tlshash":"678186fd7a52b0201b72e2b3035fb50735398b626d084835a95aebd43d640af6357f1e","first_seen":"2025-06-30T04:35:35.901497Z","last_seen":"2026-03-27T19:24:36.994378Z","times_seen":8,"resource_available":true,"data":null}},"time_used":1213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Anton\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:30.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Anton\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 26 Jul 2025 22:44:31 GMT\r\ndate: Sat, 26 Jul 2025 22:44:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1212,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"533dccb852a56667fcff5fbd86d77836","sha1":"916412b76f371155f04693f3c4a29a0c5dde7b9e","sha256":"e22315e56af64d7d059b78ac8d91550c5e1b1d2f4396ba54a50b2d0729bf1000","sha512":"f4130b005de7a02af8d9efd1658ed5db912e7acd3464f9e31830c73023b1c887841085e9cbc2af3f18fccfd59d16d102b02e36d82072f12f74530ad998277110","ssdeep":"","tlshash":"d021ce91043ba100da974cc123cf7d36ee9ea1966445d47d5ffe18c8ac5bc26235970d","first_seen":"2025-06-03T01:31:05.374184Z","last_seen":"2025-09-16T14:29:31.978662Z","times_seen":202,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":97,"dns":3,"connect":7,"send":0,"wait":34,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/8531.ebd38802.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:31.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /static/js/8531.ebd38802.chunk.js HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:32 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9D5oPKiLQs7TltbkptR6H612X6ekZ3cPy5Zxz90fbZLKWIrwWjj0iO1Ife%2FRL%2BPTK3rnZMQx%2FV772bIyzMTfuG180Jz8dru4PotMl3DTPp9HbtWwsYV%2BCU79ffhRbPIAeDeTOG2kMVZfhg8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 22 Jul 2025 22:07:40 GMT\r\netag: W/\"68800bac-bab1f\"\r\nexpires: Sat, 02 Aug 2025 22:44:32 GMT\r\ncache-control: public, max-age=604800, no-transform\r\ncf-cache-status: MISS\r\ncf-ray: 96576c0fccd6b51e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=616\u0026min_rtt=0\u0026rtt_var=75\u0026sent=4480\u0026recv=566\u0026lost=0\u0026retrans=0\u0026sent_bytes=5851065\u0026recv_bytes=35072\u0026delivery_rate=32843919\u0026ss_exit_cwnd=21660\u0026ss_exit_reason=2\u0026cwnd=25880\u0026unsent_bytes=0\u0026cid=539cb4b9206a2a9f\u0026ts=1443\u0026inflight_dur=558\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":764703,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65459)","md5":"8bb0dd91da6d617f0bc9539b53ef6a38","sha1":"1165d484da76094ee6fb4b611c7b357afe665dd5","sha256":"281a4f68eca279e8b56623c1a4fc577c40407f09be435cf8e52f7e763e09bcbb","sha512":"4c6a89e83eab275e01908894c982285efc8071da7e9f93f2756348f94ef1e863d697e03e49a07daac591c32cb60b7432fc198ded340f95c16155f23f2c6b24a7","ssdeep":"12288:d+aZ2AgeldjPLt6YKqsyaRy19YqIXY7lyoUpamsH4amsxEqJOPcd4X3n2N1zYFG+:d+aZ2/eldjjVsyaRyYqIXY7lyoUpq4OS","tlshash":"a0f45ba9391665b6ff926850011eaa09f71d6589738dc1ccb34cfcf338a9ccab169d34","first_seen":"2025-07-26T22:45:03.906727Z","last_seen":"2026-01-16T11:02:01.541877Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1168,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/8043.875c34c9.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:31.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /static/js/8043.875c34c9.chunk.js HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 91041\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BbELaM%2Fw39KdiblHybpSHkCCaTAdirSBUQo3iBgaCrqOJx8MMlDqd21ijxYTZ47cB2OCWunplIJlIYgIy8gsvz0UzUHHtNkqVn7jRyGBrVaXaXi2z6T6cbM1JGC8M2LWnvszVHltO9L%2Fp2I%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 22 Jul 2025 22:07:38 GMT\r\netag: W/\"68800baa-163a1\"\r\nexpires: Sat, 02 Aug 2025 22:44:31 GMT\r\ncache-control: public, max-age=604800, no-transform\r\ncf-cache-status: MISS\r\ncf-ray: 96576c0fccd4b51e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1218\u0026min_rtt=0\u0026rtt_var=1451\u0026sent=203\u0026recv=146\u0026lost=0\u0026retrans=0\u0026sent_bytes=149543\u0026recv_bytes=11420\u0026delivery_rate=6690657\u0026ss_exit_cwnd=21660\u0026ss_exit_reason=2\u0026cwnd=17310\u0026unsent_bytes=0\u0026cid=539cb4b9206a2a9f\u0026ts=1035\u0026inflight_dur=156\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":91041,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c63c707e422e66927bdeef75bf731fbc","sha1":"7e9c190a7f0a9097c84ca339fa6fba8bc0101bad","sha256":"2be9ea1f3d728d0efd1b704c490edab85577ccae91850f1264605a93cc1b4485","sha512":"7425a99966b5df8f902466076a745c870cfd8935efb08a36550f9f8249c6f7ea2c35671187e64c3f0eafa5ea8d326de7e1fcb14baecb48eec3ef5ddf3f27f093","ssdeep":"1536:qcIab6G9B++DKF13z+ebyBPQ+hvcaMVzCJOOc4U1qrPi4XQIVOXBNm4iR/6ADB8A:qR5/pvq9LE0n+a","tlshash":"7a9375b79392ef5f9f1800a140bf2b85cd4f8974d6ad7ca85fc8d9b16150063ab93223","first_seen":"2025-07-26T22:45:03.909427Z","last_seen":"2026-03-27T19:24:36.967914Z","times_seen":7,"resource_available":true,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/firmware.407c35de.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:31.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /static/js/firmware.407c35de.chunk.js HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:31 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fRlO6MgHCZzI0lDs2Mwn%2BoKx58YSHd9WPFbYYHHa4o%2BDYsVgHhp9w9W2BINWEigEvHO2UdykOJottlvMqSi9k1dnksLiQznrNLU5HuzVdveo6y2jKjpZhAeuIkpiUDXBrSI5qOVEdjjHVlg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 22 Jul 2025 22:07:39 GMT\r\netag: W/\"68800bab-217a3\"\r\nexpires: Sat, 02 Aug 2025 22:44:31 GMT\r\ncache-control: public, max-age=604800, no-transform\r\ncf-cache-status: MISS\r\ncf-ray: 96576c0fecdbb51e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=854\u0026min_rtt=0\u0026rtt_var=250\u0026sent=1124\u0026recv=285\u0026lost=0\u0026retrans=0\u0026sent_bytes=1279792\u0026recv_bytes=18818\u0026delivery_rate=36724463\u0026ss_exit_cwnd=21660\u0026ss_exit_reason=2\u0026cwnd=18385\u0026unsent_bytes=0\u0026cid=539cb4b9206a2a9f\u0026ts=1130\u0026inflight_dur=248\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":137123,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65455)","md5":"e41a554247ea3860c49bbad5d4a1eec6","sha1":"d0269d5c695d7f8625e8079876723c3f2e6dabf9","sha256":"665bf48044096d0c99178227b34f7a1d78c247f839f541f9cfae94ce665bec4b","sha512":"ee6b2d8303618d01982e6d1dd90c8c1400624737644ebce8e0b5adadd140e56a3f32693d5ba0658f525300d77f6d17388778d0e97e6424813a9777136d318f33","ssdeep":"1536:sv1RN26QB4IVE5I8ao0RRWi8K6IV1Tdp1ELc5kyJQ4:sNT4Uao0ayvTdp1VW4","tlshash":"8ed318e83992f6516ab701a710ef1817733d6a1b280c49a0a215fd8e74f845fb17becd","first_seen":"2025-06-30T04:35:35.88017Z","last_seen":"2026-03-27T19:24:36.96451Z","times_seen":8,"resource_available":true,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":634,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed1.bnbchain.org/","fqdn":"bsc-dataseed1.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.17.238.36","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:33.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed1.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://demnbfgkdffijregegn.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"method\":\"eth_call\",\"params\":[{\"to\":\"0x158862Ec60B7934f1333e53AC1e148811A2E3BeB\",\"data\":\"0x53ed5143\"},\"latest\"],\"id\":1,\"jsonrpc\":\"2.0\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: 0860f350037687c27f9b4b09e8d954ec\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-08-18T19:16:43.131127Z","times_seen":5262,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Noto+Sans:wght@500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:30.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Noto+Sans:wght@500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1901,"data":"{\"signature\":\"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\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 26 Jul 2025 22:44:31 GMT\r\ndate: Sat, 26 Jul 2025 22:44:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3249,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"18fca0a91656bacbcff9d18be9c525ba","sha1":"a1736f6837b6e94dd6064b8474ef27c9ff196692","sha256":"290806f24c3e98ac7fba069da53aff012d076865123c698f8de96fd77c463fd7","sha512":"33971b7a363e1fc2d146adeb4a5b6c602f5445b2d4e174cf15e620c316f0dd4270d5e732963baf2b124bee1d10307c2425d6647abe6c7ea70636eccd7e7b3c2c","ssdeep":"","tlshash":"f461d0a9401bd494aa439cd233df7e35ad1e90212080c379abfc8c849cbbc6a133574d","first_seen":"2025-06-22T07:26:50.96401Z","last_seen":"2025-07-29T14:43:01.063197Z","times_seen":8,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":92,"dns":12,"connect":20,"send":0,"wait":32,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/main.ba25ed66.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:30.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /static/js/main.ba25ed66.js HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":136,"data":"{\"method\":\"eth_call\",\"params\":[{\"to\":\"0xd24aeC3254652B0ab565E41A945b491e98Bb5FFC\",\"data\":\"0x73d4a13a\"},\"latest\"],\"id\":1,\"jsonrpc\":\"2.0\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 13980\r\nlast-modified: Tue, 22 Jul 2025 23:11:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68801a8b-369c\"\r\nexpires: Sat, 02 Aug 2025 22:44:31 GMT\r\ncache-control: public, max-age=604800, no-transform\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPfTDsoo2vUFK%2Br6ulQpm41bwOGUqEzsb5Pj8mbcE9DZNN5qGjn2n0bYkno7imOMH%2F9IGgJoCRugn5Ee%2Bwc76TIU%2Frqhqs4MmXlXpdBm%2B%2BnWt%2BXR%2FKU%3D\"}]}\r\ncf-ray: 96576c0d3aa0568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13980,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13938)","md5":"c7a1b8dc7ffa338895124a353af6c69e","sha1":"47e7d670e08d186669e7191a0118ea4248c911e8","sha256":"d6d6e18ca41cc569ea57774e5b4c3c0ca3bb631b937771f848284d30b034e2ce","sha512":"c1d954d76fec4b1fda020e1f9d0c7bb83ccbf7505ef0e962d9ef7aad30023ba219382f994e83e809f438d1be8dde92d7be7a95f0afe58bdec27281ac11ae576a","ssdeep":"384:SF9QHYAS98WmIjVkjtemakMkf92crVP0hxIe3KUXnRoP7uXpHcTD:SjQHYAS98WmIjOfvMs9v9cIeTnaPqXpU","tlshash":"96526bd933d9f0f9d5b10494e47ea1a2f329551a3608d4a0f38bec253889d919273ff6","first_seen":"2025-07-26T22:45:03.916756Z","last_seen":"2025-07-26T22:45:03.916756Z","times_seen":1,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/4767.c6a0511e.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:31.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /static/js/4767.c6a0511e.chunk.js HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:31 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8X8l4Hgg%2BpgbDqHQ1FctfPwGDBNF0%2FznjKTUuBZETyr%2Bgy%2FcxAK5D17bY7Qz%2Bhuu6F7Zr0dVueZZR6NqKKDZy1hYUm1jquD6liC01%2FZD2xcOzsFbDzBeG1yw0uU%2FHBa%2FLnFkPWNRp2q421w%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 22 Jul 2025 22:07:40 GMT\r\netag: W/\"68800bac-ac844\"\r\nexpires: Sat, 02 Aug 2025 22:44:31 GMT\r\ncache-control: public, max-age=604800, no-transform\r\ncf-cache-status: MISS\r\ncf-ray: 96576c0fccd3b51e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2940\u0026min_rtt=0\u0026rtt_var=4337\u0026sent=102\u0026recv=118\u0026lost=0\u0026retrans=0\u0026sent_bytes=29311\u0026recv_bytes=10148\u0026delivery_rate=1993194\u0026ss_exit_cwnd=21660\u0026ss_exit_reason=2\u0026cwnd=15583\u0026unsent_bytes=0\u0026cid=539cb4b9206a2a9f\u0026ts=976\u0026inflight_dur=98\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":706628,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65459)","md5":"dcccf1128d539300bd7c7c6486bb9544","sha1":"ffc0b44c1122655b1dff73547bb85283451d25ec","sha256":"543ccbe4636e2a19d73c9fd26e60bb2ded757a33789d1edca8c0de6abf3ea781","sha512":"f098aa6d6528595effea8019246fe7089207b90f784d067b6f37c3fd3d992bedd5923bfa572a71228a50ad428a34f63277fcd4bf574bb56c4c61b9e63b92179c","ssdeep":"12288:29qnVfknAoVuo0Nax0vZHkSnvJk40OGjCwTnHBahd4d:29qBknAoVuo0G091XGjp/d","tlshash":"eae4f748e7d42c7e43fb42850c3f090af1ab1855540b68aaf7fad192397457af1a7a3c","first_seen":"2025-06-30T04:35:35.8925Z","last_seen":"2026-01-16T11:02:01.571573Z","times_seen":3,"resource_available":true,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/assets/favicon-jDD-A2gd.ico","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:32.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /assets/favicon-jDD-A2gd.ico HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:33 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1794\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=W4JJg99iITOk2FZuwGrkbIMzFSilI9o5Y%2BZ9lCMpmywYin6I9cWdHHRKaOFTJqJSdX%2FImpz5LQMj1Mlqqpburnf4ttEdzppk9H3WzzPHpHFJ5arNtEoAapCfyuTVUbNkLK1g%2BX4kjav1AQg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 22 Jul 2025 22:07:38 GMT\r\netag: \"68800baa-702\"\r\nexpires: Sat, 02 Aug 2025 22:44:33 GMT\r\ncache-control: public, max-age=604800, no-transform\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 96576c19ed2db51e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1202\u0026min_rtt=0\u0026rtt_var=283\u0026sent=10159\u0026recv=969\u0026lost=0\u0026retrans=3\u0026sent_bytes=13603161\u0026recv_bytes=59395\u0026delivery_rate=64682036\u0026ss_exit_cwnd=21660\u0026ss_exit_reason=2\u0026cwnd=32484\u0026unsent_bytes=0\u0026cid=539cb4b9206a2a9f\u0026ts=2692\u0026inflight_dur=1094\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1794,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"bb9365694ce34361a66bbfd7cbe29675","sha1":"ea159758c5c1340b10c28fd3e5f3b3a30ecb2574","sha256":"a40866ce0369888b908edad0d93cc6105810efd2bad5e5532d7629b728548b12","sha512":"8032536ba37a1ed201ea1dcc5aa3b0a5ccefff71d78c4b4aa033e6bef55dee9f3fc15260e619218c4412d92cb0091c4b0bf9457d3f9552c8056cfec911dc56ad","ssdeep":"","tlshash":"0c312959d2eb8e89c24462328a2b2f9a9f00d4f9320e461e7944e0b3dc01c0fef5ce42","first_seen":"2023-06-02T16:35:47Z","last_seen":"2026-08-12T02:21:48.830082Z","times_seen":159,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:33.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nOrigin: https://demnbfgkdffijregegn.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:33 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 96576c1d3a0a56a3-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=553\u0026min_rtt=437\u0026rtt_var=227\u0026sent=8\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3194\u0026recv_bytes=1169\u0026delivery_rate=7812949\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=c8efa373c513f95d\u0026ts=177\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":560,"timings":{"blocked":372,"dns":6,"connect":1,"send":0,"wait":111,"receive":1,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:33.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nOrigin: https://demnbfgkdffijregegn.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":2063,"data":"{\"_t\":\"0.2MmDL9B7ZggpWPJGsIve0fDVaRcnD0n4t-F9vjeacz10o3Y-FnAt-U2gdFkQ_8p4S-IEgCnUj19gMi8KuUa6OXrVa5Ff6D1w7mL_zWMfX40GXWSiURTxr5pDUJ68welDgTnSlXWYtaSlcNaih1sCWWW7Sdjbb7_v5oXH-HeT8UJJlsyGNtaHsJNiLIyz1tebD537RANon8fbIwo6zTWGpZgY_tyVAxAkPNraydCXv5_89lSOq7h0y7H3qjb_LhLNxbBwZhwEqpDzfZG71tZBBgn1UGtYqNgS8Gbw4_2yji4ea_luNZaVtinDeY5uv4aahkvNxpQGXCnNOmcFVulSz3jrVBSQTW-Ak1n85EkN_7GOEnSy6PAVqSASu8xw_l8FR0HnkR8lE6MJD76Q8ELhDZxezrmr7AA-hZqu4dVFwUtgtTWCuiF1FSa74Hiu1p0yUhuUDDMbIR37Hq3p817LZCRLkgXM0ZHEK0oKX1AFzJmMNhPGHGegQwcjWEqP8Ko4JZe_K_ylur6A_Fqv-5BizGEpvWBA-MlIZv8-oTunb5bArOKA7kfr8Lu3OOyv5dwB20EQ0yngHDcrWugUAf7ueGvaD_m__T2r1GNBzyHSr0e3teaP4_zmvxVdt2OXfNHn24rC2W94_KTAa2tY_Ty1wFwIeM6qBQRDRCCWlo5K8QA4ZaKWsQN3vkN1nJzk_QusrHWYemInsJuFgpCnzFmeK0u5DpCu2QqnEjAWry41LTf1xvg8DDq0A_0X-MvTkCRiP-MESeZ8-OLoXOaE4zRvqEABJjFchlRAw7ESCvBZslRkGpeTaxh5bEB6sURt1D292FJ3hlWyYJqYBAgbHgHbDZFiZm7urWeWFLII_q2zRc0.y9TFVjDMMlfP2Uw0CLRwrg.41da606873b3ad95aab526fc4a966ede26da8f394fca41cc81bc3928325abd19\",\"_s\":{\"ps\":\"a044113feaa4007b10bf4c701d2c8807f246f8d5bce0f5f898852e0db72\",\"_s\":\"eebb1\",\"n\":\"iYZyh3XmMrUMjcFB\"},\"_c\":\"86b18d35f5ed520fc9318102b961ec206d8eb429bcc976804852b1acd0dc8dca\",\"_ps\":\"YTA0NDExM2ZlYWE0MDA3YjEwYmY0YzcwMWQyYzg4MDdmMjQ2ZjhkNWJjZTBmNWY4OTg4NTJlMGRiNzI=\",\"_ts\":1753569859,\"__hcm\":{\"GpW5MiSXO\":\"5368a22e81def6ea3c58449f719a21cd2ab642a226f479f0e14181c546ac6f44\",\"J1L44V9DL\":\"2a9ce0c848c6a4465023b3c2e0e624dfd1254111bbf7fe733e9bf795cee9a411\",\"xSKRwmBGZ\":\"000099a2c6c26e6a7dc265da6ad70fc5f84bfdc1c125f6ca34f2f97fbb6ec1d5\",\"xafDpsE58W\":\"3b7bdb9a2d20ccea23ea1f5b38ba6e879437048c50bc077be73188d487d40c48\",\"t0KYgcnWd\":\"d63268e33cdf3f6fcbd02599d78d977af38f177b68d6e0cec8781bf1df16a965\",\"ES9q6roI\":\"5-chr\",\"_\":\"4c974063df842876251ed2befbf6183e31b5210bd2bf25cad1fc0f46363c2f15\",\"__meta\":{\"df426a4c7c58763\":5,\"b3eaa157564ad63\":64,\"f6412975e94287f\":64,\"eb9d5604ca9c215\":64,\"c569502b757a866\":64,\"74f6e0813187d13\":64},\"_2\":\"d8a97182f5e50d62baa34c226bb39901094fbcc0a99fbe829160b1996ec02439\",\"_s\":\"eebb1\"},\"username\":\"4yq2\",\"deviceType\":\"desktop\",\"event\":\"view\",\"linkId\":null,\"referrer\":\"\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:33 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 96576c1d3a1056a3-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=661\u0026min_rtt=437\u0026rtt_var=387\u0026sent=11\u0026recv=13\u0026lost=0\u0026retrans=0\u0026sent_bytes=3560\u0026recv_bytes=1169\u0026delivery_rate=7812949\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=c8efa373c513f95d\u0026ts=186\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":563,"timings":{"blocked":362,"dns":11,"connect":1,"send":0,"wait":118,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/972.39a7060a.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:30.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /static/js/972.39a7060a.js HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 77751\r\nlast-modified: Tue, 22 Jul 2025 22:07:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68800baa-12fb7\"\r\nexpires: Sat, 02 Aug 2025 22:44:31 GMT\r\ncache-control: public, max-age=604800, no-transform\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XSBg8Qim8Cp8rVYwsHsEp1NsdZQKi2qpW8xejB0fZomf0gC8JsaER1uVZAiPsEHv%2FQ0tYc1vH0UmIfqJc%2BFVf9aR6AonfzZZg6U589q%2B4Wkuv5tEAzg%3D\"}]}\r\ncf-ray: 96576c0d2a9d568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77751,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65466)","md5":"8c5fcf0b8f58b6e87dcf051f6142282e","sha1":"2dab34e96c80ef15599488600b9e77fcb9029eb7","sha256":"dad3173d256dba234c3e0499c1fe7213937de5b8b489c6cb4ae1d68067da008d","sha512":"776c38153739c238ea9f7c93ffcecbafa7ceeb88a26e0cfdb3ddab24b35b7e7b9468ea7ed0ef0a397d26723aed926925361f3e8b82ee38a25b3a445f84bf8f49","ssdeep":"1536:G/kikd1TTp7Q1lds2/xpRhTnkJwsLv+guWSrmo:Pi6T85pR9qSC4","tlshash":"1e734fc83ad3f016576374a1007f048bf23e6fa9689ca504e1a1f0ed78b895ee577e58","first_seen":"2025-06-30T04:35:35.885446Z","last_seen":"2026-03-27T19:24:36.961578Z","times_seen":8,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/196.e32765d0.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:31.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /static/js/196.e32765d0.chunk.js HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":136,"data":"{\"method\":\"eth_call\",\"params\":[{\"to\":\"0x158862Ec60B7934f1333e53AC1e148811A2E3BeB\",\"data\":\"0x53ed5143\"},\"latest\"],\"id\":1,\"jsonrpc\":\"2.0\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:31 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ywK6rcJ3UhrN1ZceBanMUo1wOau5tb%2FXcBhkjZETOf30Bmi3toh5hzoau1SzLeLTUOkPWdZhKsAB8NXwdUS%2FfbFhpNpR%2FiFpJamYNBM6ffFFEm6e2Td40l73OugCxK1tY580RnSpnehHs3g%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 22 Jul 2025 22:07:41 GMT\r\netag: W/\"68800bad-1de3f2\"\r\nexpires: Sat, 02 Aug 2025 22:44:31 GMT\r\ncache-control: public, max-age=604800, no-transform\r\ncf-cache-status: MISS\r\ncf-ray: 96576c0fccd5b51e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=716\u0026min_rtt=0\u0026rtt_var=430\u0026sent=170\u0026recv=138\u0026lost=0\u0026retrans=0\u0026sent_bytes=103775\u0026recv_bytes=11051\u0026delivery_rate=5352506\u0026ss_exit_cwnd=21660\u0026ss_exit_reason=2\u0026cwnd=17768\u0026unsent_bytes=0\u0026cid=539cb4b9206a2a9f\u0026ts=1020\u0026inflight_dur=135\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1958898,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9f2b9920f1551aa4825f453630549b7d","sha1":"12fa4cbb2b8b3a317e07521602e7a308ac0a9228","sha256":"99a5ab96f82c6e4f10d479d7eeee0544bdc226932f662f4eb2f814be65ccaf30","sha512":"97f9bf26e42fd5d0508fac20ad278c552818d47b7226dd57f5bdc7c5f9ecf21ffa98b2289d03f6ef1e599d7e02ecb9f993bdce4240dcc1dbb737c67692aa4535","ssdeep":"24576:l3rRJwQ/58OfAoVuo6AkvfAyjqwx/pJCPFLhGZVla5o6:lB3kqwx/w","tlshash":"f2252a99915001bc5de526e8ce33286db29d45aef054c336ee7ecca3f2500dcf2a6e59","first_seen":"2025-07-26T22:45:03.92509Z","last_seen":"2026-01-16T11:02:01.517581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":273,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/5256.e54b3fe7.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:31.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /static/js/5256.e54b3fe7.chunk.js HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 68156\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UBRGUdbFxNNQZQzb53h0kemK1Gzi8W0VjHT5JTYizV%2BzFPtilNa4fzLLFnu7%2F%2BkjQBBl%2BZVscM4UpJD9U8uDxTZrIOo1ikRyeeSf3EAkghJ3OTJoTJLTS5jOFsSCkxJxLwAqPHGMUtlQAgw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 22 Jul 2025 22:07:38 GMT\r\netag: W/\"68800baa-10a3c\"\r\nexpires: Sat, 02 Aug 2025 22:44:31 GMT\r\ncache-control: public, max-age=604800, no-transform\r\ncf-cache-status: MISS\r\ncf-ray: 96576c0facd0b51e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1174\u0026min_rtt=0\u0026rtt_var=801\u0026sent=1210\u0026recv=292\u0026lost=0\u0026retrans=0\u0026sent_bytes=1390102\u0026recv_bytes=19158\u0026delivery_rate=36724463\u0026ss_exit_cwnd=21660\u0026ss_exit_reason=2\u0026cwnd=18385\u0026unsent_bytes=0\u0026cid=539cb4b9206a2a9f\u0026ts=1142\u0026inflight_dur=260\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68156,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65459)","md5":"5e4faabe342237a9212e0895ca1957f6","sha1":"1e0594cf86039b21eb890280218a95048f69e730","sha256":"bc479f5ff7abb1b692fb81fada1c2cfedc5fcdc28f49b054ee54425eb844e6e5","sha512":"ac24cc8d04322b27ff1ed2a7bf372d591d5fe1d34d689a2af7b2b21456ce505c6013a27b166337d5451d55ea8b588b92405e5c16fd3f01f412a25fd23dbe59b9","ssdeep":"768:OTexdlWoIuAUNZzCW+8jRxL4fY43R0i5wM8x6YmtYCzqyo:X3lGuDZaQ4VspTAo","tlshash":"d163c488b691f0b196e221e4402f010bf23e5e7a646da4d0e295d9f16cf8d8fc636f1d","first_seen":"2025-07-26T22:45:03.92682Z","last_seen":"2025-07-26T22:45:03.92682Z","times_seen":1,"resource_available":true,"data":null}},"time_used":683,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":673,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc.meowrpc.com/","fqdn":"bsc.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:33.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 03:02:00 GMT","end":"Fri, 12 Sep 2025 04:01:59 GMT"},"fingerprint":{"sha1":"B8:E9:DD:95:07:46:38:5E:E8:46:28:D1:98:DF:93:30:B8:B6:7C:10","sha256":"41:AF:75:8A:5F:CA:66:5D:34:AA:76:7F:C4:5B:8B:66:DA:12:52:DF:E9:88:4E:15:8C:51:48:F8:63:37:D5:9E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nOrigin: https://demnbfgkdffijregegn.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:33 GMT\r\ncontent-length: 0\r\ncf-ray: 96576c1d3d8356c0-OSL\r\naccess-control-allow-headers: Content-Type, Authorization, DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-allow-methods: POST, OPTIONS, POST, GET, OPTIONS\r\naccess-control-allow-origin: *, *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4BZFqTzxfJnYnbeDWf128iV743lC0BDOL4j7RUOnmydenpbt63EsANX%2FAkTT2CyHPPZVQXMbTPQWlWFfzZfXUBFqjljQa2fGW65GVyTf5H6WD7pbMQtO8HQyemEwoD%2F9Kw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=564\u0026min_rtt=399\u0026rtt_var=251\u0026sent=8\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3197\u0026recv_bytes=1170\u0026delivery_rate=6571860\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=8ab4e54040445e1e\u0026ts=130\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T04:30:40.665703Z","times_seen":17984494,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":355,"dns":4,"connect":1,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/192.png","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:32.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /192.png HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 26 Jul 2025 22:44:33 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AUk8OGQ79SqZeMijIyimq%2F6UB4DLfu77xYWOxUecanAwDl7MjaH4259P43QMLxKBSOAa1XIxSEtvVqx%2B2lp0OD9a3PEW1DIYIocfxs%2FQtOX2HdsJ3ixB3fQHIZRGE2%2F8srmXqkE%2F%2BAwS3Rc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 96576c19ed2cb51e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1202\u0026min_rtt=0\u0026rtt_var=283\u0026sent=10153\u0026recv=969\u0026lost=0\u0026retrans=0\u0026sent_bytes=13600863\u0026recv_bytes=59395\u0026delivery_rate=64682036\u0026ss_exit_cwnd=21660\u0026ss_exit_reason=2\u0026cwnd=32484\u0026unsent_bytes=0\u0026cid=539cb4b9206a2a9f\u0026ts=2552\u0026inflight_dur=1024\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"5ffae5c07e96f3fbc81668684cd46ad2","sha1":"ae8d36aec90319f78bc07cef2554872ba8c1ff06","sha256":"2cafb492d201e493579cdc4996479a43e217b06ba8e74534214816d9d10220df","sha512":"98605b77c7afa0e1952fb0a96a03a6df6be6b6286694a56a024615c650de79c62b460fefd9ae0282758e750948d59e09298c2b2ee0423916718f7f5d8968a7ff","ssdeep":"","tlshash":"03c02b2d35137c4cc563317432c37090d0c6833764ba41228440800331cf2a98ac739b","first_seen":"2025-07-02T16:20:34.721536Z","last_seen":"2026-07-07T04:35:28.755807Z","times_seen":145,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:32.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 96576c16abf5b4eb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 667118\r\nexpires: Thu, 16 Jul 2026 22:44:32 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=flzliqmMVuaK8qGEyvugLP4xVZBPXTZyWwGi7OUqlSnxdaJIus4cluLe%2FO6cpFgNxh0O9vV15AZpm30TIUYdPoZ5LsD%2BHWtHPyQXCenjQ%2FWdIilp1SoRMgZS04Q%2FBdFQui3MglWH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-20T02:24:58.557917Z","times_seen":31943,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":33,"dns":4,"connect":3,"send":0,"wait":13,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/892.4f05d6b3.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:31.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /static/js/892.4f05d6b3.chunk.js HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 39071\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uKymhW8stzMtdLoyvtW64RnebFNrrYikl8iOqtLsoIlfGVfEmZPtbJ98JIU4WUdBF0lqunAGgMtYlWreow9TW9Vs2gIFt9PFzVrfDnOh7AZ6MS1tF7ZxnQya7LIdnC1juxT9qEpkvj76jUY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 22 Jul 2025 22:07:38 GMT\r\netag: W/\"68800baa-989f\"\r\nexpires: Sat, 02 Aug 2025 22:44:31 GMT\r\ncache-control: public, max-age=604800, no-transform\r\ncf-cache-status: MISS\r\ncf-ray: 96576c0fdcd8b51e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2160\u0026min_rtt=0\u0026rtt_var=2714\u0026sent=182\u0026recv=140\u0026lost=0\u0026retrans=0\u0026sent_bytes=120575\u0026recv_bytes=11144\u0026delivery_rate=5352506\u0026ss_exit_cwnd=21660\u0026ss_exit_reason=2\u0026cwnd=17768\u0026unsent_bytes=0\u0026cid=539cb4b9206a2a9f\u0026ts=1032\u0026inflight_dur=151\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39071,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38948)","md5":"edbe776fc857d9c80e0882b23c648aa7","sha1":"8020a7d57bbe359482751bd369291ad0e1733080","sha256":"cd756ede1bc88138e942c293a4d38bcf36bc90e450f6e692633c7bfa648b8001","sha512":"983955921b73e24921d6c680f792a01925bbe7c2d0b4c5d3f252d1e523a90cb31c5a53fb40d44a04b385b460bbd7d1268796d015104ed896759c6dbe640434c7","ssdeep":"384:aT+k0nlqiU3M+VlFXbnPzKwWlk1GZ0mzMFB3dHwIszDGgZBO9xP7wBQ1au5hwhr1:aTAlMM+zFLzK7kOM1tsDE1r1au5UrkA","tlshash":"3303e65d724374b20ddb60f1a53f560ba2375029bc478a4cb52aead34d3adb9707ae30","first_seen":"2025-06-30T04:35:35.894891Z","last_seen":"2026-03-27T19:24:36.948294Z","times_seen":8,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/css/4791.6a03c997.chunk.css","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:31.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /static/css/4791.6a03c997.chunk.css HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:31 GMT\r\ncontent-type: text/css\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PjRk8%2FsDOaOwmJo4O%2B7DxiKb%2BNO3RXW9UhMdXmmy0VJADT7eHhjSOHU3YAaXh3dCoGTYJjija7HCTOzLjUXUl8ar5iTbkeAllPB%2BF5aeNZbIePc0Cno%2BMxUTlkEAxC3iHpP44xfhVBz7Ews%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 22 Jul 2025 22:07:40 GMT\r\netag: W/\"68800bac-42a4c\"\r\nexpires: Sat, 02 Aug 2025 22:44:31 GMT\r\ncache-control: public, max-age=604800, no-transform\r\ncf-cache-status: MISS\r\ncf-ray: 96576c0facd1b51e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=890\u0026min_rtt=0\u0026rtt_var=415\u0026sent=998\u0026recv=270\u0026lost=0\u0026retrans=0\u0026sent_bytes=1114327\u0026recv_bytes=17936\u0026delivery_rate=36724463\u0026ss_exit_cwnd=21660\u0026ss_exit_reason=2\u0026cwnd=18385\u0026unsent_bytes=0\u0026cid=539cb4b9206a2a9f\u0026ts=1117\u0026inflight_dur=237\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":272972,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d9cdaac95dd0430226a04e71e264e4d4","sha1":"d43515c77144e9a68b1514bd2f311b6f3fea33e9","sha256":"97f82dffae61ef50ff7c46af574124310218412504a9d18cb263f762743aa6c5","sha512":"8f8c7481ef2e6471b7316c8e200bef0a497024877711f6c2b70793e4eff20557804671f75c310e0edd58252ca291af8db6cf3c9284acc5d6fff19c04fd56dd81","ssdeep":"1536:+ARRRb1xvdkx+BUGyJoiMheAvWMNXvgXj5GFpPi3w/F/iENFmzIm7DLriIKqAYCc:+ARR91xTEMheAv/nG3","tlshash":"7544c7659781207ef16b873ad5d2f9081934de41d95fbff8f2a0b60882c39d622e7b05","first_seen":"2025-07-26T22:45:03.930815Z","last_seen":"2026-01-16T11:02:01.545752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/5119.ed75f294.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:31.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /static/js/5119.ed75f294.chunk.js HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:31 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kf9%2FzcRvsvvlIiwTzFEvNnSf%2F6rzF5HEZ0P0iiVoaxbYbSfmfDAWJWzCrEoPEvrWlhR6Z7Euc9NiAi0xnT9Zp63gCFcl%2BSryuxiFE7HxfowtB0cr7MGSMQkA329RjuPyyVsuBoEnbHbIrOQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 22 Jul 2025 22:07:41 GMT\r\netag: W/\"68800bad-3259bb\"\r\nexpires: Sat, 02 Aug 2025 22:44:31 GMT\r\ncache-control: public, max-age=604800, no-transform\r\ncf-cache-status: MISS\r\ncf-ray: 96576c0fccd7b51e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1444\u0026min_rtt=0\u0026rtt_var=962\u0026sent=2928\u0026recv=425\u0026lost=0\u0026retrans=0\u0026sent_bytes=3723847\u0026recv_bytes=26735\u0026delivery_rate=51339633\u0026ss_exit_cwnd=21660\u0026ss_exit_reason=2\u0026cwnd=36081\u0026unsent_bytes=0\u0026cid=539cb4b9206a2a9f\u0026ts=1310\u0026inflight_dur=427\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3299771,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65459)","md5":"e633165c5b33a272da8996973df4ea69","sha1":"80770db9ce33377734f45b51f741ee8aa6474029","sha256":"43151494793ca4869b235fc2e3bc9ebcdbf54da0ae47df40eda4b935b1cf6565","sha512":"20c119cc60e4350384a8f53eaed64f054efff43469903a16828e5c912f49b80600c4995250c961daca43a793f4bd1f8dbe830e4b5932a280c1cb7b268b9dcfbb","ssdeep":"12288:8ITAFuooGYK8N3Xe6ieTaZ6aMJJsJiooUQmL:8qAFL8Nneyu6R/sJXL","tlshash":"552519997291743546da40a9807f0507f336691e241ac45cf728f8efa8bcd8e31bbb79","first_seen":"2025-07-26T22:45:03.932586Z","last_seen":"2025-07-26T22:45:03.932586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":940,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/8963.e8c8af49.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:31.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /static/js/8963.e8c8af49.chunk.js HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 61629\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NY9q7RqxgDlkdJCBh5jkkXy%2FPDy8rSqo2o80QrDANMmx1E%2F9K04qJv%2BgLaFp3z1usmTPFFnSDc5KAsmMn2NsnK8NcLBV81umVG8vjpLTygmjBwtH57bcj1ceiBCmdvNe7WPPJpCQ83DM1%2BU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 22 Jul 2025 22:07:38 GMT\r\netag: W/\"68800baa-f0bd\"\r\nexpires: Sat, 02 Aug 2025 22:44:31 GMT\r\ncache-control: public, max-age=604800, no-transform\r\ncf-cache-status: MISS\r\ncf-ray: 96576c0fdcd9b51e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1229\u0026min_rtt=0\u0026rtt_var=528\u0026sent=1294\u0026recv=298\u0026lost=0\u0026retrans=0\u0026sent_bytes=1500412\u0026recv_bytes=19472\u0026delivery_rate=36724463\u0026ss_exit_cwnd=21660\u0026ss_exit_reason=2\u0026cwnd=18385\u0026unsent_bytes=0\u0026cid=539cb4b9206a2a9f\u0026ts=1152\u0026inflight_dur=271\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61629,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (61581)","md5":"d2d2011d5b64c38286f715b59346ea32","sha1":"f9eed04c5e98f29dee5f0b59f7ee05736fd00ad5","sha256":"893ffdf22e26f90f6189149411514cbde5de3c237da55a2e12ffc63f7f386900","sha512":"4ba00c5a999cb9badb5aad9be23ab8aa1c9f9825c8c483eec9ada9175fbea9ec6d8ac77d304d273b6d5b2f5206ba038cca45df84ea231911aee59463f5e8f783","ssdeep":"768:bTBI7FmvGSpM4WlvGSpM00nNWTX+u0TYcRNvEaKfVhuYnsdqzlwP8oatEfPu/v7G:GeEblIViktnMXLNbr7Zfe","tlshash":"f45309f0726670d856e3488ca0374121e2387aaab309c064776b48f5d96ebc3e5d7f67","first_seen":"2025-07-26T22:45:03.934305Z","last_seen":"2026-01-16T11:02:01.525555Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":921,"receive":302,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/6535.b6d5c17d.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:31.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /static/js/6535.b6d5c17d.chunk.js HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:32 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3819\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VJgcI35IuUghX7m1W82UcWWbdi6FmUzrcObKyDpvhRgRVda8iEgSdeqhkxXZ1AqDh3vI79SJk5vhOsFXfo7L4JcVzyB%2FNV3Qtx%2FAp8uMUzNSGS5hozlm3YL8WxZeH7Ctaydh02vxLAHiRAI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 22 Jul 2025 22:07:38 GMT\r\netag: W/\"68800baa-eeb\"\r\nexpires: Sat, 02 Aug 2025 22:44:32 GMT\r\ncache-control: public, max-age=604800, no-transform\r\ncf-cache-status: MISS\r\ncf-ray: 96576c0fdcdab51e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1061\u0026min_rtt=0\u0026rtt_var=318\u0026sent=5165\u0026recv=616\u0026lost=0\u0026retrans=0\u0026sent_bytes=6802528\u0026recv_bytes=37946\u0026delivery_rate=43683331\u0026ss_exit_cwnd=21660\u0026ss_exit_reason=2\u0026cwnd=41992\u0026unsent_bytes=0\u0026cid=539cb4b9206a2a9f\u0026ts=1490\u0026inflight_dur=604\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3819,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3771)","md5":"e660f999316dcaf79e2670c102b98849","sha1":"36fb7aea4b307c30d65c048884413ba977b117d0","sha256":"06f974126bb382aa9499df95489fcb9ae010f83c02f7548051c440e8ecd92ec4","sha512":"0b026b1bc1d1e4b0726a75ca0fc323388fd2fa2f1c627b28f123c9191b3536390149e768774c2ce3603e60f2770b1c72328e1467e6e2f4d8849bc87415c01e92","ssdeep":"","tlshash":"ff7193947892f6741fda1dca84be4121fb2a584e341ac4a0e4ae4e1f35471ce693e93a","first_seen":"2025-06-30T04:35:35.87695Z","last_seen":"2025-07-26T22:45:03.936001Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1223,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/static/js/610.9f2033b7.chunk.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:31.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /static/js/610.9f2033b7.chunk.js HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":733,"data":"[{\"app\":\"landings\",\"event\":\"start\",\"usid\":\"19848e8b2adddb2f27a3730\",\"sub_id\":\"973102833973072565\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"single-page\",\"event_source\":1,\"ymid\":\"973102833973072565\",\"request_var\":\"8796595\",\"landing_domain\":\"cdn.gfpxw.com\",\"landing_url\":\"https://cdn.gfpxw.com/single-page/1124/en.html?s=973102833973072565\u0026z=8683065\u0026var=8796595\u0026campaignid=8972091\u0026b=22805595\u0026ymid=973102833973072565\u0026svar=1753569325\u0026ssk=f238df957a9fbe8507cebbcb7bb6484f\",\"source_zone_id\":8683065,\"config_id\":1124,\"build_version\":\"v0.0.193-verticals\",\"landing_load_date_time\":\"2025-07-26 22:44:26.000413 +00:00\",\"design_id\":6,\"vertical\":\"utility-app-mixer\",\"events_history\":[{\"timeStamp\":1753569866411,\"event\":\"start\",\"timeOrigin\":0}]}]"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:31 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bKxhqzNED4RfDBbekBBdGOoTI1myQabTeE0mAU5rV7rseG%2B8CB2febcF4rMWaKnBuZvNs3jiaDeEXcqLOEQee918CpSV4xr4jH9s2tF77stV%2B%2FZfC6Nqo9HdNNu%2FW2ra9%2BmBOlmGZpYMOf0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 22 Jul 2025 22:59:01 GMT\r\netag: W/\"688017b5-479734\"\r\nexpires: Sat, 02 Aug 2025 22:44:31 GMT\r\ncache-control: public, max-age=604800, no-transform\r\ncf-cache-status: MISS\r\ncf-ray: 96576c0fecdfb51e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1098\u0026min_rtt=0\u0026rtt_var=590\u0026sent=1238\u0026recv=294\u0026lost=0\u0026retrans=0\u0026sent_bytes=1426872\u0026recv_bytes=19260\u0026delivery_rate=36724463\u0026ss_exit_cwnd=21660\u0026ss_exit_reason=2\u0026cwnd=18385\u0026unsent_bytes=0\u0026cid=539cb4b9206a2a9f\u0026ts=1144\u0026inflight_dur=263\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4691764,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2643)","md5":"a32bdd2abcf5d9168714d2f7675d9981","sha1":"b49c1fa50e497c1ea9765b7d5d6b95a612972a1c","sha256":"480374b1d8c7df79b2655803250af105841e894a7de868039f7495ef99cf03da","sha512":"518d516c13d8d6d984a7da58cdc3260319241106b47e0e68aec941c69b2e431fd14dcee623cf8c6962092099f08159d377858b9fb022dc6ee3a74c0fa080b2bd","ssdeep":"3072:yA0NAr+hKF0wMAhBNh0N7l8OlHdyhW59SQAcUPvkuJE+gUXqeAft8Z2wV8jnDSFc:yLOfPPgHmhoSQEkIEXwUt8Z2Oc","tlshash":"fd25e7e92fe100ac9443a2bfcf2e390b750724bb6d66b900bd8cda24bf1c15ca5756d5","first_seen":"2025-07-26T22:45:03.937698Z","last_seen":"2025-07-26T22:45:03.937698Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":575,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/secureproxy.php?e=ping_proxy","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:33.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:33 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 4\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VlKdQM7wEpGsPPuWeGFeCkd3vDfXF4PNHpH6OGhkahBLF3ph5nFeTiHRWPUkEuXq0b8WNIaDA6Ovo3AVBb6ARhdnFh5dUQt00%2BUCLsSjCZwg1%2FAPwDc%2FYJN04nbVhFZhKYGXMI2Yknnua%2BI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96576c1ccd40b51e-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=8433\u0026min_rtt=0\u0026rtt_var=14674\u0026sent=10162\u0026recv=971\u0026lost=0\u0026retrans=3\u0026sent_bytes=13605758\u0026recv_bytes=59731\u0026delivery_rate=64682036\u0026ss_exit_cwnd=21660\u0026ss_exit_reason=2\u0026cwnd=32484\u0026unsent_bytes=0\u0026cid=539cb4b9206a2a9f\u0026ts=2971\u0026inflight_dur=1226\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-17T16:47:50.33609Z","times_seen":9046,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":291,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"demnbfgkdffijregegn.shop/58c3ca4e-c042-4abb-b188-d7be14f62db1.js","fqdn":"demnbfgkdffijregegn.shop","domain":"demnbfgkdffijregegn.shop","tld":"shop"},"ip":{"addr":"104.21.62.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://demnbfgkdffijregegn.shop/","date":"2025-07-26T22:44:30.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"demnbfgkdffijregegn.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 14:57:53 GMT","end":"Wed, 08 Oct 2025 15:50:35 GMT"},"fingerprint":{"sha1":"1D:83:38:CE:7A:99:A6:3F:AF:3A:20:E9:D6:CC:7A:CD:75:2D:21:4F","sha256":"24:2D:B3:53:39:0C:1E:FA:F9:6A:8A:7D:DC:BD:BE:CD:21:C6:A4:13:71:DE:17:A4:95:D1:74:D6:46:61:71:46"}}},"request":{"raw":"GET /58c3ca4e-c042-4abb-b188-d7be14f62db1.js HTTP/1.1\r\nHost: demnbfgkdffijregegn.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://demnbfgkdffijregegn.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 26 Jul 2025 22:44:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 22 Jul 2025 22:14:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68800d2b-4e16f1\"\r\nexpires: Sat, 02 Aug 2025 22:44:31 GMT\r\ncache-control: public, max-age=604800, no-transform\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fkd717D5ABjenAbL9prAz6u3YQ6bnDtpgQrtI2LQ0l%2FDOxKJtpOqHU2Rv96IdE45AcLESQ9cYbG%2BVs2mzOaLmRhNNDyiVH32z5c5yNH%2BgM0NbAlPaZ0%3D\"}]}\r\ncf-ray: 96576c0d3aa4568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5117681,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"dbd07cab87c1d449b5210f3545aa0ac8","sha1":"f652248006bbe18671c9d3d9b542d66f06854bab","sha256":"c7d8ed38b38b2bf644ce99395337d5dedf231ee812f13004ddf86f675330805f","sha512":"2be6a3229a3a5bdf6a61b0354c7069820483ded9dac843a1f780a2425ec7392d3c31453118b8abc01680a57803d43af778b084fbe52c05e42b3704e4e80984eb","ssdeep":"12288:VzBe6kEdOxQo7mDllvKGgxvRwbM35JpgjLR7PZPYGsW5MZ2pdAwNeJXpTiHj:qsd2Qs6llvKZWErk","tlshash":"e4254a80e150e4b11aa542dc617bc40de129e64bbc0fa4c6b6bccdf6755cfb86427b3a","first_seen":"2025-07-26T22:45:03.940316Z","last_seen":"2025-07-26T22:45:03.940316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"demnbfgkdffijregegn.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}