{"report_id":"bf5df30d-7306-4e6f-a53f-c4b3dde94009","version":0,"status":"done","tags":["suspicious"],"date":"2026-06-20T08:22:35Z","url":{"schema":"http","addr":"smash.quicksentind.org","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"ip":{"addr":"91.229.239.28","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"final":{"url":{"schema":"https","addr":"smash.quicksentind.org/qr/?tenant=smash","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"title":"Transfer Trust Wallet","dom":{"size":5499,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (392)","md5":"a81c8b40cbb73c5a009cf90c00892bd9","sha1":"3bb281d235a121b284135dc6d0e2f4b289357a04","sha256":"992ef00ab01eb6ad149ec8106fff38458ca3106da32d319af11f798bd33a95cc","sha512":"95ccfc21d3e51677b7f5b51c7c559c6852242a609bd2c12896f18de67d33f4e6100dfb86d011ad2e2d6256143793210fcb8f9bcb03f961347e63d909aa5b605e","ssdeep":"96:3dv7h9NqO3uuau9WCWaJ9mkow/LqA36R6LIfkgIfkmvEqVO4MPmJtDbuk:3dv7jNq8uuau9WCWaJAkow/LuEL5eatN","tlshash":"f9b1d722f8e11f6ea00387e66ae6b03fba24e507c20f995c75dc51a15fc7d99dda3108","dom_hash":"domhash5c16fb52f53d60d611d7ac3bf435deb9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"smash.quicksentind.org","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"ip":{"addr":"91.229.239.28","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-25T08:22:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-20","alert":"Detects file containing Telegram Bot API","trigger":"smash.quicksentind.org/qr/main.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"smash.quicksentind.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-14T22:45:09.968061Z","alert_count":0,"request_count":1,"received_data":761326,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"smash.quicksentind.org","ip":{"addr":"91.229.239.28","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"domain_registered":"2026-06-06","domain_rank":0,"first_seen":"2026-06-20T08:16:33.614936Z","last_seen":"2026-06-20T08:16:33.614936Z","alert_count":12,"request_count":10,"received_data":77120,"sent_data":4859,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Render","description":"Render is a cloud computing platform that provides a wide range of services, including web hosting, cloud computing, and application development. Render offers several hosting options, including static site hosting, web application hosting, and managed databases.","website":"https://render.com","common_platform_enumeration":"","icon":"Render.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"smash.quicksentind.org/api-config.js","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"ip":{"addr":"91.229.239.28","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"b004d6212a23fcca2aa8472d1755106a","sha1":"37e98b93dfc2186e405beae37b05f660215b26a3","sha256":"398a67fe3adae0fcdf575a2e9ae8cc1b148d11678a7b5795fb63cbb92ca4b25e","sha512":"300229e9680abdd0eac0046af7f0e3286f2165fe87d0f50af4a6f12724d9e21c0a87e16a0cff524fe6be3679dbafc343e9fb6d6dfbea7771d561d26d332aa1d2","ssdeep":"","tlshash":"672114af9882618609259361860f4d13256f956f112fca03bfac465a2f0c33f231a7f8","size":1240,"data":"","first_seen":"2026-05-30T00:07:31.161209Z","last_seen":"2026-06-20T08:22:48.699147Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smash.quicksentind.org/api-config.js","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"ip":{"addr":"91.229.239.28","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"b004d6212a23fcca2aa8472d1755106a","sha1":"37e98b93dfc2186e405beae37b05f660215b26a3","sha256":"398a67fe3adae0fcdf575a2e9ae8cc1b148d11678a7b5795fb63cbb92ca4b25e","sha512":"300229e9680abdd0eac0046af7f0e3286f2165fe87d0f50af4a6f12724d9e21c0a87e16a0cff524fe6be3679dbafc343e9fb6d6dfbea7771d561d26d332aa1d2","ssdeep":"","tlshash":"672114af9882618609259361860f4d13256f956f112fca03bfac465a2f0c33f231a7f8","size":1240,"data":"","first_seen":"2026-05-30T00:07:31.161209Z","last_seen":"2026-06-20T08:22:48.699147Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":760171,"data":"","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-06-20T11:46:17.440101Z","times_seen":3626,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smash.quicksentind.org/qr/main.js","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"ip":{"addr":"91.229.239.28","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"560e30584e09d550ffcc15ae1eb20d3b","sha1":"4d8025084a20b7db2e0893d1bf3c630eb6c14a5d","sha256":"4a99576646f10d636d2cf24694de9a101e56ae87abeb6733c008aa5626fde55d","sha512":"8e960253226a6b3d28cccdeca31d60f6df07425c58cbae71679d2324a82f2a95d1e5d17c76b7e4e158313b282e653fcd66b116eef5bf8332f93755a29b0d0b4c","ssdeep":"192:YUPLkViUWgCGoCY7f4ycxmr1cgpXekB3fn9Ds5vwIAlQ3v0qBI5p6MxwShCXp13:jPLkVMraIy51zIdUz","tlshash":"0d82e96e16777020046760a96bcb3120307791273a15eca0769e83936f5ec2eadf3bdd","size":18772,"data":"","first_seen":"2026-06-07T00:06:17.741658Z","last_seen":"2026-06-20T08:22:48.697917Z","times_seen":6,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-20","alert":"Detects file containing Telegram Bot API","trigger":"smash.quicksentind.org/qr/main.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"smash.quicksentind.org/qr/?tenant=smash","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"ip":{"addr":"91.229.239.28","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-06-20T08:38:12.097042Z","times_seen":1786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smash.quicksentind.org/qr/runtime-config.js","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"ip":{"addr":"91.229.239.28","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"78efc188c8f3eef19d5085d416f1d091","sha1":"e046d389663af9b5e512c3261403d9bb5655208b","sha256":"9eed7cc17417da470516554cc7ec7dd87ab243354de982628c0d68539877b092","sha512":"2dbd852d801726d1bd2a6dc3e3080973b83b37c46edbd24eeec1445916dbb876478fbc5b10f83a40816ac52c02b9912ff981417c01c8c20ec5ff6dddbc377308","ssdeep":"96:jeWTE8yxd5ED2E7ECfawzwk2w0swNOUy2sscBcfZYdH2jojwegS4c:dIZd5ED2eZokjgGAkccWBe9R","tlshash":"e7a196995ed37031493ba06d536fa654b8166213110bd80cbd8c9304ffb99678ebaee8","size":5006,"data":"","first_seen":"2026-05-30T00:07:31.165475Z","last_seen":"2026-06-20T08:22:48.694127Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smash.quicksentind.org/qr/config.js","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"ip":{"addr":"91.229.239.28","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"1dd0dea023477f66456c09eb71c1d2e2","sha1":"e1896ffda97e5271ff467c3974d9cb407fdf52ee","sha256":"8928269a34fc6b6f87c30371c6f1be80a8e8e037e722f7e2aec42e572b734557","sha512":"ec3c0d13316e29fb950b832befc46f0d8e8e1d17766242cf62100052e176d8b5845e3d3b3e285a557bc5b99782a47b05b9ca4ae6fa5d7b872b2f2916adc29b11","ssdeep":"","tlshash":"8121ccfb0fb579620c090067cb897a25224255377a04f405fc1faa563feca72a670dc4","size":1373,"data":"","first_seen":"2026-05-30T00:07:31.175403Z","last_seen":"2026-06-20T08:22:48.696974Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smash.quicksentind.org/qr/?tenant=smash","date":"2026-06-20T08:22:13.235Z","timestamp":1781943733235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/ethers@5.7.2/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://smash.quicksentind.org/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:22:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 168432\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.7.2\r\nx-jsd-version-type: version\r\netag: W/\"b996b-tlFUVYf2JXNF3D3p3apESxDe3z4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220026-FRA, cache-bma-essb1270058-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3018385\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=20q9zIZhMVvgGo91HG8SHbW4W%2F5pumYsz3LamV20kh2Xev97sM9lYhiJK4QObo1wnjV8pgQF4sQVf%2FTgZ8K2rSJWHF8gJQaTe%2B%2F7jr59GY%2FQwC7R%2F3CV3Lfxn2kcMDmclDU%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0e95d4cddf10883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760171,"size_decoded":169587,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-06-20T11:46:17.440101Z","times_seen":3626,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":20,"receive":29,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smash.quicksentind.org/qr/favicon.ico","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"ip":{"addr":"91.229.239.28","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smash.quicksentind.org/qr/?tenant=smash","date":"2026-06-20T08:22:13.557Z","timestamp":1781943733557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smash.quicksentind.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 05:45:12 GMT","end":"Tue, 08 Sep 2026 05:45:11 GMT"},"fingerprint":{"sha1":"31:ED:3A:BA:F4:D4:BC:24:B8:6F:57:AF:2B:A4:B1:00:52:A2:76:A1","sha256":"DE:C9:16:08:19:B0:ED:81:D1:97:DD:91:67:68:F8:21:E2:0D:73:25:17:A3:D4:C2:2D:64:51:F7:7D:7B:36:35"}}},"request":{"raw":"GET /qr/favicon.ico HTTP/1.1\r\nHost: smash.quicksentind.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://smash.quicksentind.org/qr/?tenant=smash\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\nserver: Caddy\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: Accept-Encoding\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Tue, 26 May 2026 15:57:24 GMT\r\ncontent-length: 2365\r\nx-content-type-options: nosniff\r\netag: \"disqcy6ectmp8jw-gzip\"\r\ndate: Sat, 20 Jun 2026 08:22:13 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":11084,"size_decoded":2700,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"1688d3ec55d7bd115a703f299fa7bd4b","sha1":"dab6ca4effd45e52c3359d2d6871d4778ac3162e","sha256":"1a4d1ffb8b59b465a17a2c8c9f9584aa18271372e357f16e0604429fd0a9a6e7","sha512":"f4d61e3950a150ac1f554903708184927aa02cafa9b03090f8999d5494cbf67d83feb25cb11d6a22a0ef2fe2adf36fe31838a722d521b05309c0abc0a7c7c749","ssdeep":"192:8x4NaQl76LSeyLZS+UQU12U1HxLZ9IUSDWgz:Y5+/ZzUQU12U1tZSUSSC","tlshash":"6c3280032beb0104f1b6af59a97615620e7bbd521838cd5c11ac2e4d8fe3f529861fb7","first_seen":"2026-05-08T08:33:53.047061Z","last_seen":"2026-06-20T08:22:48.691792Z","times_seen":14,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"smash.quicksentind.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smash.quicksentind.org/api-config.js","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"ip":{"addr":"91.229.239.28","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smash.quicksentind.org/","date":"2026-06-20T08:22:12.879Z","timestamp":1781943732879,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /api-config.js HTTP/1.1\r\nHost: smash.quicksentind.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://smash.quicksentind.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"smash.quicksentind.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smash.quicksentind.org/qr/?tenant=smash","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"ip":{"addr":"91.229.239.28","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-20T08:22:12.959Z","timestamp":1781943732959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smash.quicksentind.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 05:45:12 GMT","end":"Tue, 08 Sep 2026 05:45:11 GMT"},"fingerprint":{"sha1":"31:ED:3A:BA:F4:D4:BC:24:B8:6F:57:AF:2B:A4:B1:00:52:A2:76:A1","sha256":"DE:C9:16:08:19:B0:ED:81:D1:97:DD:91:67:68:F8:21:E2:0D:73:25:17:A3:D4:C2:2D:64:51:F7:7D:7B:36:35"}}},"request":{"raw":"GET /qr/?tenant=smash HTTP/1.1\r\nHost: smash.quicksentind.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://smash.quicksentind.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: Caddy\r\nvary: Accept-Encoding\r\ncontent-length: 2365\r\ncontent-encoding: gzip\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: \"disqcy6ectmp8jw-gzip\"\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Tue, 26 May 2026 15:57:24 GMT\r\ndate: Sat, 20 Jun 2026 08:22:12 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":11084,"size_decoded":2700,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"1688d3ec55d7bd115a703f299fa7bd4b","sha1":"dab6ca4effd45e52c3359d2d6871d4778ac3162e","sha256":"1a4d1ffb8b59b465a17a2c8c9f9584aa18271372e357f16e0604429fd0a9a6e7","sha512":"f4d61e3950a150ac1f554903708184927aa02cafa9b03090f8999d5494cbf67d83feb25cb11d6a22a0ef2fe2adf36fe31838a722d521b05309c0abc0a7c7c749","ssdeep":"192:8x4NaQl76LSeyLZS+UQU12U1HxLZ9IUSDWgz:Y5+/ZzUQU12U1tZSUSSC","tlshash":"6c3280032beb0104f1b6af59a97615620e7bbd521838cd5c11ac2e4d8fe3f529861fb7","first_seen":"2026-05-08T08:33:53.047061Z","last_seen":"2026-06-20T08:22:48.691792Z","times_seen":14,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"smash.quicksentind.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smash.quicksentind.org/qr/style.css","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"ip":{"addr":"91.229.239.28","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://smash.quicksentind.org/qr/?tenant=smash","date":"2026-06-20T08:22:13.040Z","timestamp":1781943733040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smash.quicksentind.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 05:45:12 GMT","end":"Tue, 08 Sep 2026 05:45:11 GMT"},"fingerprint":{"sha1":"31:ED:3A:BA:F4:D4:BC:24:B8:6F:57:AF:2B:A4:B1:00:52:A2:76:A1","sha256":"DE:C9:16:08:19:B0:ED:81:D1:97:DD:91:67:68:F8:21:E2:0D:73:25:17:A3:D4:C2:2D:64:51:F7:7D:7B:36:35"}}},"request":{"raw":"GET /qr/style.css HTTP/1.1\r\nHost: smash.quicksentind.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://smash.quicksentind.org/qr/?tenant=smash\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 20 Jun 2026 08:22:13 GMT\r\nserver: Caddy\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: \"disqcy6ectmpbz7-gzip\"\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Tue, 26 May 2026 15:57:24 GMT\r\ncontent-length: 3792\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":15523,"size_decoded":4126,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c08b10bbeabba2693f4d5800ec5a3fe2","sha1":"d8341820a7e65309f8a9472d6a6c17c84d606108","sha256":"93aa890a0c8ce70af27f673f8270abadd24e076d09b7c5b6b588d4bd60f83e88","sha512":"0300c2c97f35a85dd2591bd9f7fd9816e6bbab240a2808abb69885016851aee68f2e1ee011d5cfb73032d95e85e94ea0c53dde024a0c6cd032fa38e2b58c5116","ssdeep":"192:wDn4DUDn4D1ZgNHuECW1IJPLJvnCxvDRHsfHyzvBt2pPOOIjyxPhPLsXj2VE3Io0:J11WJQONyNtsm","tlshash":"5662655956b34c016d2a44feb3de7747b23b80cbde2eeda9b7c511048fc51a159c2b88","first_seen":"2026-03-01T02:47:58.32943Z","last_seen":"2026-06-20T08:22:48.693399Z","times_seen":16,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"smash.quicksentind.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smash.quicksentind.org/qr/runtime-config.js","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"ip":{"addr":"91.229.239.28","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smash.quicksentind.org/qr/?tenant=smash","date":"2026-06-20T08:22:13.236Z","timestamp":1781943733236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smash.quicksentind.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 05:45:12 GMT","end":"Tue, 08 Sep 2026 05:45:11 GMT"},"fingerprint":{"sha1":"31:ED:3A:BA:F4:D4:BC:24:B8:6F:57:AF:2B:A4:B1:00:52:A2:76:A1","sha256":"DE:C9:16:08:19:B0:ED:81:D1:97:DD:91:67:68:F8:21:E2:0D:73:25:17:A3:D4:C2:2D:64:51:F7:7D:7B:36:35"}}},"request":{"raw":"GET /qr/runtime-config.js HTTP/1.1\r\nHost: smash.quicksentind.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://smash.quicksentind.org/qr/?tenant=smash\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: Accept-Encoding\r\netag: \"disqcy6ectmp3v2-gzip\"\r\nlast-modified: Tue, 26 May 2026 15:57:24 GMT\r\ndate: Sat, 20 Jun 2026 08:22:13 GMT\r\nserver: Caddy\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncontent-length: 1843\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":5006,"size_decoded":2184,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"78efc188c8f3eef19d5085d416f1d091","sha1":"e046d389663af9b5e512c3261403d9bb5655208b","sha256":"9eed7cc17417da470516554cc7ec7dd87ab243354de982628c0d68539877b092","sha512":"2dbd852d801726d1bd2a6dc3e3080973b83b37c46edbd24eeec1445916dbb876478fbc5b10f83a40816ac52c02b9912ff981417c01c8c20ec5ff6dddbc377308","ssdeep":"96:jeWTE8yxd5ED2E7ECfawzwk2w0swNOUy2sscBcfZYdH2jojwegS4c:dIZd5ED2eZokjgGAkccWBe9R","tlshash":"e7a196995ed37031493ba06d536fa654b8166213110bd80cbd8c9304ffb99678ebaee8","first_seen":"2026-05-30T00:07:31.165475Z","last_seen":"2026-06-20T08:22:48.694127Z","times_seen":9,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"smash.quicksentind.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smash.quicksentind.org/api/tenant-config","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"ip":{"addr":"91.229.239.28","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://smash.quicksentind.org/qr/?tenant=smash","date":"2026-06-20T08:22:13.456Z","timestamp":1781943733456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smash.quicksentind.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 05:45:12 GMT","end":"Tue, 08 Sep 2026 05:45:11 GMT"},"fingerprint":{"sha1":"31:ED:3A:BA:F4:D4:BC:24:B8:6F:57:AF:2B:A4:B1:00:52:A2:76:A1","sha256":"DE:C9:16:08:19:B0:ED:81:D1:97:DD:91:67:68:F8:21:E2:0D:73:25:17:A3:D4:C2:2D:64:51:F7:7D:7B:36:35"}}},"request":{"raw":"GET /api/tenant-config HTTP/1.1\r\nHost: smash.quicksentind.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://smash.quicksentind.org/qr/?tenant=smash\r\nX-Tenant-Slug: smash\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-frame-options: SAMEORIGIN\r\nrndr-id: eacebed3-1489-4076\r\nx-ratelimit-remaining: 119\r\nserver: cloudflare\r\nx-ratelimit-limit: 120\r\nx-ratelimit-reset: 60\r\nx-render-origin-server: Render\r\nx-content-type-options: nosniff, nosniff\r\ncf-cache-status: DYNAMIC\r\nx-dns-prefetch-control: off\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncf-ray: a0e95d4e4d231866-KIV\r\ndate: Sat, 20 Jun 2026 08:22:13 GMT\r\nvia: 2.0 Caddy\r\nreferrer-policy: strict-origin-when-cross-origin, no-referrer\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-type: application/json; charset=utf-8\r\nx-download-options: noopen\r\ncontent-length: 281\r\ncross-origin-opener-policy: same-origin\r\norigin-agent-cluster: ?1\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: same-origin\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Render","description":"Render is a cloud computing platform that provides a wide range of services, including web hosting, cloud computing, and application development. Render offers several hosting options, including static site hosting, web application hosting, and managed databases.","website":"https://render.com","common_platform_enumeration":"","icon":"Render.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":403,"size_decoded":1173,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"913e4310153b381e139968ef8982decc","sha1":"11c4f43d77eb9c522d54a9910f1a608ddf3947ed","sha256":"210135a73ed9c66701920a62322f4146ac91bf97138e2be2e677b3eb7b059f27","sha512":"8a81573484d60a182d60f64752b9e3a568fc2c4e388ea7eaaf1bbe2426b8c1a75145eeb86902820a804ab7af64b2c5bec59ca29c5c88f3f28d239ba439f4df47","ssdeep":"","tlshash":"c0e0f13b1368b0375f41338561eda5e8d0da5fa2de8cc426142fdb0293b8c235c4214d","first_seen":"2026-06-20T08:16:31.037404Z","last_seen":"2026-06-20T08:22:48.696013Z","times_seen":2,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"smash.quicksentind.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smash.quicksentind.org/qr/config.js","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"ip":{"addr":"91.229.239.28","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smash.quicksentind.org/qr/?tenant=smash","date":"2026-06-20T08:22:13.921Z","timestamp":1781943733921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smash.quicksentind.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 05:45:12 GMT","end":"Tue, 08 Sep 2026 05:45:11 GMT"},"fingerprint":{"sha1":"31:ED:3A:BA:F4:D4:BC:24:B8:6F:57:AF:2B:A4:B1:00:52:A2:76:A1","sha256":"DE:C9:16:08:19:B0:ED:81:D1:97:DD:91:67:68:F8:21:E2:0D:73:25:17:A3:D4:C2:2D:64:51:F7:7D:7B:36:35"}}},"request":{"raw":"GET /qr/config.js HTTP/1.1\r\nHost: smash.quicksentind.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://smash.quicksentind.org/qr/?tenant=smash\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 26 May 2026 15:57:24 GMT\r\nserver: Caddy\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: \"disqcy6ectmp125-gzip\"\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 20 Jun 2026 08:22:13 GMT\r\ncontent-encoding: gzip\r\ncontent-length: 670\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1373,"size_decoded":1010,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"1dd0dea023477f66456c09eb71c1d2e2","sha1":"e1896ffda97e5271ff467c3974d9cb407fdf52ee","sha256":"8928269a34fc6b6f87c30371c6f1be80a8e8e037e722f7e2aec42e572b734557","sha512":"ec3c0d13316e29fb950b832befc46f0d8e8e1d17766242cf62100052e176d8b5845e3d3b3e285a557bc5b99782a47b05b9ca4ae6fa5d7b872b2f2916adc29b11","ssdeep":"","tlshash":"8121ccfb0fb579620c090067cb897a25224255377a04f405fc1faa563feca72a670dc4","first_seen":"2026-05-30T00:07:31.175403Z","last_seen":"2026-06-20T08:22:48.696974Z","times_seen":8,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"smash.quicksentind.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smash.quicksentind.org/qr/main.js","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"ip":{"addr":"91.229.239.28","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smash.quicksentind.org/qr/?tenant=smash","date":"2026-06-20T08:22:13.983Z","timestamp":1781943733983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smash.quicksentind.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 05:45:12 GMT","end":"Tue, 08 Sep 2026 05:45:11 GMT"},"fingerprint":{"sha1":"31:ED:3A:BA:F4:D4:BC:24:B8:6F:57:AF:2B:A4:B1:00:52:A2:76:A1","sha256":"DE:C9:16:08:19:B0:ED:81:D1:97:DD:91:67:68:F8:21:E2:0D:73:25:17:A3:D4:C2:2D:64:51:F7:7D:7B:36:35"}}},"request":{"raw":"GET /qr/main.js HTTP/1.1\r\nHost: smash.quicksentind.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://smash.quicksentind.org/qr/?tenant=smash\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\netag: \"disqcy6ectmpehg-gzip\"\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Tue, 26 May 2026 15:57:24 GMT\r\ncontent-encoding: gzip\r\nserver: Caddy\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: Accept-Encoding\r\ndate: Sat, 20 Jun 2026 08:22:14 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":18772,"size_decoded":5253,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"560e30584e09d550ffcc15ae1eb20d3b","sha1":"4d8025084a20b7db2e0893d1bf3c630eb6c14a5d","sha256":"4a99576646f10d636d2cf24694de9a101e56ae87abeb6733c008aa5626fde55d","sha512":"8e960253226a6b3d28cccdeca31d60f6df07425c58cbae71679d2324a82f2a95d1e5d17c76b7e4e158313b282e653fcd66b116eef5bf8332f93755a29b0d0b4c","ssdeep":"192:YUPLkViUWgCGoCY7f4ycxmr1cgpXekB3fn9Ds5vwIAlQ3v0qBI5p6MxwShCXp13:jPLkVMraIy51zIdUz","tlshash":"0d82e96e16777020046760a96bcb3120307791273a15eca0769e83936f5ec2eadf3bdd","first_seen":"2026-06-07T00:06:17.741658Z","last_seen":"2026-06-20T08:22:48.697917Z","times_seen":6,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-20","alert":"Detects file containing Telegram Bot API","trigger":"smash.quicksentind.org/qr/main.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"smash.quicksentind.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"smash.quicksentind.org/","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"ip":{"addr":"91.229.239.28","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-20T08:22:12.494Z","timestamp":1781943732494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smash.quicksentind.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 05:45:12 GMT","end":"Tue, 08 Sep 2026 05:45:11 GMT"},"fingerprint":{"sha1":"31:ED:3A:BA:F4:D4:BC:24:B8:6F:57:AF:2B:A4:B1:00:52:A2:76:A1","sha256":"DE:C9:16:08:19:B0:ED:81:D1:97:DD:91:67:68:F8:21:E2:0D:73:25:17:A3:D4:C2:2D:64:51:F7:7D:7B:36:35"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: smash.quicksentind.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\netag: \"ditmppjaqt3k6yd-gzip\"\r\nlast-modified: Wed, 27 May 2026 17:18:39 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 2878\r\ndate: Sat, 20 Jun 2026 08:22:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":9013,"size_decoded":3265,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f722161788617f9584185113a7ae18b0","sha1":"8fd468c70e0e5138efdd770f894dfb719d8fa32d","sha256":"0f53acfaa6b9494939e7ef07d2a6984c8a702f08f7dbb1e8af0d623ed5009b24","sha512":"ced12f6e8e9acb6b65eb6a1516bec74b02721fab4bc91ea4c34bbdca54735cef0527e24395837c6076b04c6c8e0492318da31baa486931b6e455273299cbfc69","ssdeep":"192:vW0I4kpDaRfbDvvDT2cTZXyXCDWeNosJDTbTZYRDfAHfYgz8p4/Yn8yBfkFhHcYC:vA46Yf2h0RZW2ggA4+fdYC","tlshash":"7e02d6668cd35133193be23e576fa204793ad52b010bde047f4c83199fe4a2643a2eec","first_seen":"2026-05-30T00:07:31.158313Z","last_seen":"2026-06-20T08:22:48.698602Z","times_seen":9,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":3,"connect":55,"send":0,"wait":60,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"smash.quicksentind.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smash.quicksentind.org/api-config.js","fqdn":"smash.quicksentind.org","domain":"quicksentind.org","tld":"org"},"ip":{"addr":"91.229.239.28","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smash.quicksentind.org/qr/?tenant=smash","date":"2026-06-20T08:22:13.042Z","timestamp":1781943733042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smash.quicksentind.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 05:45:12 GMT","end":"Tue, 08 Sep 2026 05:45:11 GMT"},"fingerprint":{"sha1":"31:ED:3A:BA:F4:D4:BC:24:B8:6F:57:AF:2B:A4:B1:00:52:A2:76:A1","sha256":"DE:C9:16:08:19:B0:ED:81:D1:97:DD:91:67:68:F8:21:E2:0D:73:25:17:A3:D4:C2:2D:64:51:F7:7D:7B:36:35"}}},"request":{"raw":"GET /api-config.js HTTP/1.1\r\nHost: smash.quicksentind.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://smash.quicksentind.org/qr/?tenant=smash\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: \"ditg80dopmnbyg-gzip\"\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 27 May 2026 12:13:26 GMT\r\ncontent-encoding: gzip\r\ncontent-length: 632\r\nserver: Caddy\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ndate: Sat, 20 Jun 2026 08:22:13 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1240,"size_decoded":971,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b004d6212a23fcca2aa8472d1755106a","sha1":"37e98b93dfc2186e405beae37b05f660215b26a3","sha256":"398a67fe3adae0fcdf575a2e9ae8cc1b148d11678a7b5795fb63cbb92ca4b25e","sha512":"300229e9680abdd0eac0046af7f0e3286f2165fe87d0f50af4a6f12724d9e21c0a87e16a0cff524fe6be3679dbafc343e9fb6d6dfbea7771d561d26d332aa1d2","ssdeep":"","tlshash":"672114af9882618609259361860f4d13256f956f112fca03bfac465a2f0c33f231a7f8","first_seen":"2026-05-30T00:07:31.161209Z","last_seen":"2026-06-20T08:22:48.699147Z","times_seen":13,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"smash.quicksentind.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}